Sagemaker endpoint fails to create: Repository does not grant ecr:GetDownloadUrlForLayer, ecr:BatchGetImage, ecr:BatchCheckLayerAvailability permission to sagemaker.amazonaws.com service principal.

0

I am getting the error in the title every time I attempt to create an an endpoint using an image in ECR. The ECR repository has the following IAM permissions applied:

{ "Version": "2012-10-17", "Statement": [ { "Sid": "Sagemaker", "Effect": "Allow", "Principal": { "Service": "sagemaker.amazonaws.com" }, "Action": [ "ecr:BatchCheckLayerAvailability", "ecr:BatchGetImage", "ecr:GetDownloadUrlForLayer" ] } ] }

I have tried recreating everything multiple times, both via CLI and from the Admin UI. New repo, new endpoint config, new model, etc. I always get the same error, even though I am explicitly granting exactly those permissions to the sagemaker.amazonaws.com principle.

Chris
質問済み 6ヶ月前97ビュー
回答なし

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ