Reason why errors occur when starting SageMaker Studio

0

Hello! I have a question about errors found when starting SageMaker Studio (below).


AccessDeniedException User: X is not auth**orized to perform: sagemaker:CreateDomain on resource: arn:aws:sagemaker:ap-northeast-1:XX because no identity-based policy allows the sagemaker:CreateDomain action

ValidationException Access denied in getting/deleting the portfolio shared by SageMaker. Please call withservicecatalog:ListAcceptedPortfolioShares permission.

AccessDeniedException User: X is not authorized to perform: sagemaker:CreateUserProfile on resource: arn:aws:sagemaker:ap-northeast-1:XX because no identity-based policy allows the sagemaker:CreateUserProfile action


I resolved the errors by adding some inline policies, but I cannot understand the reason why the errors occur on my user with S3 Full Access and SageMaker Full Access policies.

I'd happy to tell me any information about the errors. Thank you!

demandé il y a 2 ans1244 vues
1 réponse
1

As far as I know, according the aws docs the passRole action should be granted to the SageMake execution role for some cases such as creating images. So your s3:* and sagemaker:* is not enough, but still need to add iam:passRole to policies

hai
répondu il y a 2 ans
  • hai-san, Thank you for your answer. Now I have no idea about passRole, but I'd like to refer aws docs you showed me.

Vous n'êtes pas connecté. Se connecter pour publier une réponse.

Une bonne réponse répond clairement à la question, contient des commentaires constructifs et encourage le développement professionnel de la personne qui pose la question.

Instructions pour répondre aux questions