By using AWS re:Post, you agree to the Terms of Use
AWS re:Postre:Post
/Error in Creating Project in SageMaker Studio/

Error in Creating Project in SageMaker Studio

0

I encountered following erorr when I tried to create a new project in SageMaker Studio. I tried to add AdminAccess to role/service-role/AmazonSageMakerServiceCatalogProductsLaunchRole, but still doesn't help. What could be the problem?

Error getting the details of Service Catalog Provisioning Parameters. Error message: ValidationException: Access denied while assuming the role arn:aws:iam::XXXXXXXXX:role/service-role/AmazonSageMakerServiceCatalogProductsLaunchRole. Args: {"productId":"prod-xxxxxxxx","provisioningArtifactId":"pa-xxxxxxxxx","pathId":"lpv2-xxxxxxxxxx"}

printscreen

  • Qinjie 2 months ago

    btw, I am in GCC (Government Commercial Cloud in Singapore).

  • Tasio EXPERT2 months ago

    Can you share the trust policy of that role?

Topics
Machine Learning & AISecurity Identity & Compliance
Tags
Amazon SageMakerIAM Policies
Qinjie
asked 2 months ago91 views
1 Answers
1

SageMaker assumes the AmazonSageMakerServiceCatalogProductsLaunchRole role to access and launch Projects. If you aren't using the AmazonSageMakerFullAccess policy for your Studio or user profile's execution role, make sure your Studio execution role has enough permissions to assume the AmazonSageMakerServiceCatalogProductsLaunchRole.

You don't need to add Admin access to the launch role, it has the minimum required permissions to launch a service catalog product, including assuming the AmazonSageMakerServiceCatalogProductsUseRole for running the project successfully.

Durga_S
answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant questions