本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AmazonSageMakerTrainingSessionAccess
描述: 为来电者身份提供创建和管理亚马逊的权限 SageMaker 培训课程,进行培训和抽样操作,使用客户管理 AWS KMS 密钥通过 SageMaker,将执行角色传递给 SageMaker、发布模型包、访问公共中心内容和管理 SageMaker 默认 Amazon S3 存储桶。
AmazonSageMakerTrainingSessionAccess 是一项 AWS 托管式策略。
使用此策略
您可以将 AmazonSageMakerTrainingSessionAccess 附加到您的用户、组和角色。
策略详细信息
-
类型: AWS 托管策略
-
创建时间: UTC 时间 2026 年 10 月 13 日 00:37
-
编辑时间: 世界标准时间 2026 年 10 月 13 日 00:37
-
ARN:
arn:aws:iam::aws:policy/AmazonSageMakerTrainingSessionAccess
策略版本
策略版本:v1(默认)
此策略的默认版本是定义策略权限的版本。当拥有该策略的用户或角色请求访问时 AWS 资源, AWS 检查策略的默认版本以确定是否允许该请求。
JSON 策略文档
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "SageMakerTrainingSessionControlPlanePermissions", "Effect" : "Allow", "Action" : [ "sagemaker:CreateTrainingSession", "sagemaker:DescribeTrainingSession", "sagemaker:StopTrainingSession", "sagemaker:DeleteTrainingSession", "sagemaker:AddTags" ], "Resource" : "arn:aws:sagemaker:*:*:training-session/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SageMakerTrainingSessionRuntimePermissions", "Effect" : "Allow", "Action" : [ "sagemaker:ExecuteTrainingOperation", "sagemaker:GetTrainingOperationResult", "sagemaker:ExecuteSamplingOperation", "sagemaker:GetSamplingOperationResult", "sagemaker:SampleTrainingSession", "sagemaker:SampleTrainingSessionWithResponseStream" ], "Resource" : "arn:aws:sagemaker:*:*:training-session/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SageMakerTrainingSessionRuntimeKmsPermissions", "Effect" : "Allow", "Action" : [ "kms:Decrypt", "kms:GenerateDataKey" ], "Resource" : "arn:aws:kms:*:*:key/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "StringLike" : { "kms:ViaService" : "sagemaker.*.amazonaws.com" } } }, { "Sid" : "SageMakerTrainingSessionListPermissions", "Effect" : "Allow", "Action" : [ "sagemaker:ListTrainingSessions" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "BearerTokenPermissions", "Effect" : "Allow", "Action" : [ "sagemaker:CallWithBearerToken" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "PassExecutionRolePermissions", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : [ "arn:aws:iam::*:role/service-role/*SageMaker*", "arn:aws:iam::*:role/service-role/*Sagemaker*", "arn:aws:iam::*:role/service-role/*sagemaker*" ], "Condition" : { "ArnLike" : { "iam:AssociatedResourceArn" : "arn:aws:sagemaker:*:*:*" }, "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "iam:PassedToService" : [ "training-session.sagemaker.amazonaws.com" ] } } }, { "Sid" : "SageMakerTrainingSessionModelPackagePermissions", "Effect" : "Allow", "Action" : [ "sagemaker:CreateModelPackageGroup", "sagemaker:DeleteModelPackage", "sagemaker:DescribeModelPackageGroup", "sagemaker:DescribeModelPackage", "sagemaker:ListModelPackages" ], "Resource" : [ "arn:aws:sagemaker:*:*:model-package/*", "arn:aws:sagemaker:*:*:model-package-group/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SageMakerTrainingSessionPublicHubPermissions", "Effect" : "Allow", "Action" : [ "sagemaker:DescribeHubContent", "sagemaker:ListHubContents" ], "Resource" : [ "arn:aws:sagemaker:*:aws:hub/SageMakerPublicHub", "arn:aws:sagemaker:*:aws:hub-content/SageMakerPublicHub/*" ] }, { "Sid" : "SageMakerTrainingSessionS3Permissions", "Effect" : "Allow", "Action" : [ "s3:CreateBucket", "s3:DeleteObject", "s3:ListBucket" ], "Resource" : [ "arn:aws:s3:::sagemaker-*", "arn:aws:s3:::sagemaker-*/*" ], "Condition" : { "StringEquals" : { "s3:ResourceAccount" : "${aws:PrincipalAccount}" } } } ] }