SageMaker Studio with custom EFS: permission denied for write operations

Question

I going to use SageMaker Studio with an existing custom file system (EFS). I followed the instructions comprised in:
https://docs.aws.amazon.com/sagemaker/latest/dg/domain-custom-efs.html
Additionally, the SageMaker user role has a policy AmazonElasticFileSystemClientReadWriteAccess attached. The solution works well with ReadOnly access, but I get the "Permission denied: custom-file-systems/efs/fs-..." error for the write operations.

Any ideas on how to cope with it? SageMaker Studio is an AWS-managed service, there is no full control over OS/file system configuration.

Answer

Far from expert here, but are you sure you are writing with the correct user profile?\
"*When you onboard to Studio, SageMaker creates an Amazon Elastic File System (EFS) volume for your domain that is shared by all Studio users in the domain. Each user gets their own private home directory on the EFS volume. This home directory is used to store the user's notebooks, Git repositories, and other data. To prevent other users in the domain from accessing the user's data, SageMaker creates a globally unique user ID for the user's profile and applies it as a POSIX user/group ID for the user’s home directory.*"

Answer

Hi,

Did you follow the guidance re. Custom EFS volume for SageMaker Studio: https://docs.aws.amazon.com/sagemaker/latest/dg/domain-custom-efs.html

I twas announced a few months ago; https://aws.amazon.com/about-aws/whats-new/2023/11/amazon-eds-volume-jupyterlab-codeeditor-amazon-sagemaker-studio/

Additionally, did you set up your EFS for write access according to: https://repost.aws/knowledge-center/efs-enable-read-write-access ?

Best,

Didier

Answer

did you try to attach the policy with the  sagemaker execution role in place of user role?

SageMaker Studio with custom EFS: permission denied for write operations

Relevant content