本文属于机器翻译版本。若本译文内容与英语原文存在差异，则一律以英文原文为准。
AmazonSageMakerModelRegistryFullAccess
描述：这是 Sagemaker 中模型注册表的新托管式策略。此策略是一项独立的策略，可以附加到用户角色以访问 Sagemaker 中与模型注册表相关的功能。
AmazonSageMakerModelRegistryFullAccess 是一项 AWS 托管式策略。
使用此策略
您可以将 AmazonSageMakerModelRegistryFullAccess 附加到您的用户、组和角色。
策略详细信息
-
类型：AWS 托管策略
-
创建时间：2023 年 4 月 13 日 05:20 UTC
-
编辑时间：2024 年 6 月 6 日 18:48 UTC
-
ARN:
arn:aws:iam::aws:policy/AmazonSageMakerModelRegistryFullAccess
策略版本
策略版本：v2（默认）
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时，AWS 会检查策略的默认版本以确定是否允许该请求。
JSON 策略文档
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "AmazonSageMakerModelRegistrySageMakerReadPermission",
"Effect" : "Allow",
"Action" : [
"sagemaker:DescribeAction",
"sagemaker:DescribeInferenceRecommendationsJob",
"sagemaker:DescribeModelPackage",
"sagemaker:DescribeModelPackageGroup",
"sagemaker:DescribePipeline",
"sagemaker:DescribePipelineExecution",
"sagemaker:ListAssociations",
"sagemaker:ListArtifacts",
"sagemaker:ListModelMetadata",
"sagemaker:ListModelPackages",
"sagemaker:Search",
"sagemaker:GetSearchSuggestions"
],
"Resource" : "*"
},
{
"Sid" : "AmazonSageMakerModelRegistrySageMakerWritePermission",
"Effect" : "Allow",
"Action" : [
"sagemaker:AddTags",
"sagemaker:CreateModel",
"sagemaker:CreateModelPackage",
"sagemaker:CreateModelPackageGroup",
"sagemaker:CreateEndpoint",
"sagemaker:CreateEndpointConfig",
"sagemaker:CreateInferenceRecommendationsJob",
"sagemaker:DeleteModelPackage",
"sagemaker:DeleteModelPackageGroup",
"sagemaker:DeleteTags",
"sagemaker:UpdateModelPackage"
],
"Resource" : "*"
},
{
"Sid" : "AmazonSageMakerModelRegistryS3GetPermission",
"Effect" : "Allow",
"Action" : [
"s3:GetObject"
],
"Resource" : [
"arn:aws:s3:::*SageMaker*",
"arn:aws:s3:::*Sagemaker*",
"arn:aws:s3:::*sagemaker*"
]
},
{
"Sid" : "AmazonSageMakerModelRegistryS3ListPermission",
"Effect" : "Allow",
"Action" : [
"s3:ListBucket",
"s3:ListAllMyBuckets"
],
"Resource" : "*"
},
{
"Sid" : "AmazonSageMakerModelRegistryECRReadPermission",
"Effect" : "Allow",
"Action" : [
"ecr:BatchGetImage",
"ecr:DescribeImages"
],
"Resource" : "*"
},
{
"Sid" : "AmazonSageMakerModelRegistryIAMPassRolePermission",
"Effect" : "Allow",
"Action" : [
"iam:PassRole"
],
"Resource" : "arn:aws:iam::*:role/*",
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : "sagemaker.amazonaws.com"
}
}
},
{
"Sid" : "AmazonSageMakerModelRegistryTagReadPermission",
"Effect" : "Allow",
"Action" : [
"tag:GetResources"
],
"Resource" : "*"
},
{
"Sid" : "AmazonSageMakerModelRegistryResourceGroupGetPermission",
"Effect" : "Allow",
"Action" : [
"resource-groups:GetGroupQuery"
],
"Resource" : "arn:aws:resource-groups:*:*:group/*"
},
{
"Sid" : "AmazonSageMakerModelRegistryResourceGroupListPermission",
"Effect" : "Allow",
"Action" : [
"resource-groups:ListGroupResources"
],
"Resource" : "*"
},
{
"Sid" : "AmazonSageMakerModelRegistryResourceGroupWritePermission",
"Effect" : "Allow",
"Action" : [
"resource-groups:CreateGroup",
"resource-groups:Tag"
],
"Resource" : "arn:aws:resource-groups:*:*:group/*",
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:TagKeys" : "sagemaker:collection"
}
}
},
{
"Sid" : "AmazonSageMakerModelRegistryResourceGroupDeletePermission",
"Effect" : "Allow",
"Action" : "resource-groups:DeleteGroup",
"Resource" : "arn:aws:resource-groups:*:*:group/*",
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/sagemaker:collection" : "true"
}
}
},
{
"Sid" : "AmazonSageMakerModelRegistryResourceKMSPermission",
"Effect" : "Allow",
"Action" : [
"kms:CreateGrant",
"kms:DescribeKey",
"kms:GenerateDataKey",
"kms:Decrypt"
],
"Resource" : "arn:aws:kms:*:*:key/*",
"Condition" : {
"StringEquals" : {
"aws:ResourceTag/sagemaker" : "true"
},
"StringLike" : {
"kms:ViaService" : "sagemaker.*.amazonaws.com"
}
}
}
]
}了解更多信息
