Terjemahan disediakan oleh mesin penerjemah. Jika konten terjemahan yang diberikan bertentangan dengan versi bahasa Inggris aslinya, utamakan versi bahasa Inggris.

# AmazonSageMakerTrainingSessionAccess
<a name="AmazonSageMakerTrainingSessionAccess"></a>

**Deskripsi**: Memberikan izin untuk identitas penelepon untuk membuat dan mengelola Amazon SageMaker sesi pelatihan, jalankan operasi pelatihan dan pengambilan sampel, gunakan yang dikelola pelanggan AWS Kunci KMS melalui SageMaker, berikan peran eksekusi ke SageMaker, menerbitkan paket model, mengakses konten hub publik, dan mengelola SageMaker bucket Amazon S3 default.

`AmazonSageMakerTrainingSessionAccess` adalah sebuah [AWS kebijakan yang dikelola](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies).

## Menggunakan kebijakan ini
<a name="AmazonSageMakerTrainingSessionAccess-how-to-use"></a>

Anda dapat melampirkan `AmazonSageMakerTrainingSessionAccess` untuk pengguna, grup, dan peran Anda.

## Detail kebijakan
<a name="AmazonSageMakerTrainingSessionAccess-details"></a>
+ **Mengetik**: AWS kebijakan yang dikelola 
+ **Waktu pembuatan**: 13 Oktober 2026, 00:37 UTC 
+ **Waktu yang diedit:** 13 Oktober 2026, 00:37 UTC
+ **ARN**: `arn:aws:iam::aws:policy/AmazonSageMakerTrainingSessionAccess`

## Versi kebijakan
<a name="AmazonSageMakerTrainingSessionAccess-version"></a>

**Versi kebijakan:** v1 (default)

Versi default kebijakan adalah versi yang menentukan izin untuk kebijakan. Ketika pengguna atau peran dengan kebijakan membuat permintaan untuk mengakses AWS sumber daya, AWS memeriksa versi default kebijakan untuk menentukan apakah akan mengizinkan permintaan. 

## Dokumen kebijakan JSON
<a name="AmazonSageMakerTrainingSessionAccess-json"></a>

```
{
  "Version" : "2012-10-17",
  "Statement" : [
    {
      "Sid" : "SageMakerTrainingSessionControlPlanePermissions",
      "Effect" : "Allow",
      "Action" : [
        "sagemaker:CreateTrainingSession",
        "sagemaker:DescribeTrainingSession",
        "sagemaker:StopTrainingSession",
        "sagemaker:DeleteTrainingSession",
        "sagemaker:AddTags"
      ],
      "Resource" : "arn:aws:sagemaker:*:*:training-session/*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    },
    {
      "Sid" : "SageMakerTrainingSessionRuntimePermissions",
      "Effect" : "Allow",
      "Action" : [
        "sagemaker:ExecuteTrainingOperation",
        "sagemaker:GetTrainingOperationResult",
        "sagemaker:ExecuteSamplingOperation",
        "sagemaker:GetSamplingOperationResult",
        "sagemaker:SampleTrainingSession",
        "sagemaker:SampleTrainingSessionWithResponseStream"
      ],
      "Resource" : "arn:aws:sagemaker:*:*:training-session/*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    },
    {
      "Sid" : "SageMakerTrainingSessionRuntimeKmsPermissions",
      "Effect" : "Allow",
      "Action" : [
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource" : "arn:aws:kms:*:*:key/*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        },
        "StringLike" : {
          "kms:ViaService" : "sagemaker.*.amazonaws.com"
        }
      }
    },
    {
      "Sid" : "SageMakerTrainingSessionListPermissions",
      "Effect" : "Allow",
      "Action" : [
        "sagemaker:ListTrainingSessions"
      ],
      "Resource" : "*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    },
    {
      "Sid" : "BearerTokenPermissions",
      "Effect" : "Allow",
      "Action" : [
        "sagemaker:CallWithBearerToken"
      ],
      "Resource" : "*",
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    },
    {
      "Sid" : "PassExecutionRolePermissions",
      "Effect" : "Allow",
      "Action" : [
        "iam:PassRole"
      ],
      "Resource" : [
        "arn:aws:iam::*:role/service-role/*SageMaker*",
        "arn:aws:iam::*:role/service-role/*Sagemaker*",
        "arn:aws:iam::*:role/service-role/*sagemaker*"
      ],
      "Condition" : {
        "ArnLike" : {
          "iam:AssociatedResourceArn" : "arn:aws:sagemaker:*:*:*"
        },
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}",
          "iam:PassedToService" : [
            "training-session.sagemaker.amazonaws.com"
          ]
        }
      }
    },
    {
      "Sid" : "SageMakerTrainingSessionModelPackagePermissions",
      "Effect" : "Allow",
      "Action" : [
        "sagemaker:CreateModelPackageGroup",
        "sagemaker:DeleteModelPackage",
        "sagemaker:DescribeModelPackageGroup",
        "sagemaker:DescribeModelPackage",
        "sagemaker:ListModelPackages"
      ],
      "Resource" : [
        "arn:aws:sagemaker:*:*:model-package/*",
        "arn:aws:sagemaker:*:*:model-package-group/*"
      ],
      "Condition" : {
        "StringEquals" : {
          "aws:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    },
    {
      "Sid" : "SageMakerTrainingSessionPublicHubPermissions",
      "Effect" : "Allow",
      "Action" : [
        "sagemaker:DescribeHubContent",
        "sagemaker:ListHubContents"
      ],
      "Resource" : [
        "arn:aws:sagemaker:*:aws:hub/SageMakerPublicHub",
        "arn:aws:sagemaker:*:aws:hub-content/SageMakerPublicHub/*"
      ]
    },
    {
      "Sid" : "SageMakerTrainingSessionS3Permissions",
      "Effect" : "Allow",
      "Action" : [
        "s3:CreateBucket",
        "s3:DeleteObject",
        "s3:ListBucket"
      ],
      "Resource" : [
        "arn:aws:s3:::sagemaker-*",
        "arn:aws:s3:::sagemaker-*/*"
      ],
      "Condition" : {
        "StringEquals" : {
          "s3:ResourceAccount" : "${aws:PrincipalAccount}"
        }
      }
    }
  ]
}
```

## Pelajari selengkapnya
<a name="AmazonSageMakerTrainingSessionAccess-learn-more"></a>
+ [Buat kumpulan izin menggunakan AWS kebijakan yang dikelola di Pusat Identitas IAM](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html) 
+ [Menambahkan dan menghapus izin identitas IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html) 
+ [Memahami pembuatan versi untuk kebijakan IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [Memulai dengan AWS kebijakan terkelola dan bergerak menuju izin hak istimewa terendah](https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)