Sagemaker endpoint fails to create: Repository does not grant ecr:GetDownloadUrlForLayer, ecr:BatchGetImage, ecr:BatchCheckLayerAvailability permission to sagemaker.amazonaws.com service principal.

0

I am getting the error in the title every time I attempt to create an an endpoint using an image in ECR. The ECR repository has the following IAM permissions applied:

{ "Version": "2012-10-17", "Statement": [ { "Sid": "Sagemaker", "Effect": "Allow", "Principal": { "Service": "sagemaker.amazonaws.com" }, "Action": [ "ecr:BatchCheckLayerAvailability", "ecr:BatchGetImage", "ecr:GetDownloadUrlForLayer" ] } ] }

I have tried recreating everything multiple times, both via CLI and from the Admin UI. New repo, new endpoint config, new model, etc. I always get the same error, even though I am explicitly granting exactly those permissions to the sagemaker.amazonaws.com principle.

답변 없음

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠