本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。
AmazonSageMakerGroundTruthExecution
說明：提供執行「 SageMaker GroundTruth 標籤」工作所需 AWS 服務的存取權
AmazonSageMakerGroundTruthExecution是AWS 受管理的策略。
使用此政策
您可以附加AmazonSageMakerGroundTruthExecution至您的使用者、群組和角色。
政策詳情
-
類型： AWS 受管理的策略
-
創建時間:2020 年 7 月 9 日, 世界標準時間 19:30
-
編輯時間：2022 年 4 月 29 日，世界標準時間 20:49
-
ARN:
arn:aws:iam::aws:policy/AmazonSageMakerGroundTruthExecution
政策版本
策略版本：v3(預設值)
原則的預設版本是定義原則權限的版本。當具有策略的使用者或角色發出要求以存取 AWS 資源時，請 AWS 檢查原則的預設版本，以決定是否允許該要求。
政策文件
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "CustomLabelingJobs",
"Effect" : "Allow",
"Action" : [
"lambda:InvokeFunction"
],
"Resource" : [
"arn:aws:lambda:*:*:function:*GtRecipe*",
"arn:aws:lambda:*:*:function:*LabelingFunction*",
"arn:aws:lambda:*:*:function:*SageMaker*",
"arn:aws:lambda:*:*:function:*sagemaker*",
"arn:aws:lambda:*:*:function:*Sagemaker*"
]
},
{
"Effect" : "Allow",
"Action" : [
"s3:AbortMultipartUpload",
"s3:GetObject",
"s3:PutObject"
],
"Resource" : [
"arn:aws:s3:::*GroundTruth*",
"arn:aws:s3:::*Groundtruth*",
"arn:aws:s3:::*groundtruth*",
"arn:aws:s3:::*SageMaker*",
"arn:aws:s3:::*Sagemaker*",
"arn:aws:s3:::*sagemaker*"
]
},
{
"Effect" : "Allow",
"Action" : [
"s3:GetObject"
],
"Resource" : "*",
"Condition" : {
"StringEqualsIgnoreCase" : {
"s3:ExistingObjectTag/SageMaker" : "true"
}
}
},
{
"Effect" : "Allow",
"Action" : [
"s3:GetBucketLocation",
"s3:ListBucket"
],
"Resource" : "*"
},
{
"Sid" : "CloudWatch",
"Effect" : "Allow",
"Action" : [
"cloudwatch:PutMetricData",
"logs:CreateLogStream",
"logs:CreateLogGroup",
"logs:DescribeLogStreams",
"logs:PutLogEvents"
],
"Resource" : "*"
},
{
"Sid" : "StreamingQueue",
"Effect" : "Allow",
"Action" : [
"sqs:CreateQueue",
"sqs:DeleteMessage",
"sqs:GetQueueAttributes",
"sqs:GetQueueUrl",
"sqs:ReceiveMessage",
"sqs:SendMessage",
"sqs:SetQueueAttributes"
],
"Resource" : "arn:aws:sqs:*:*:*GroundTruth*"
},
{
"Sid" : "StreamingTopicSubscribe",
"Effect" : "Allow",
"Action" : "sns:Subscribe",
"Resource" : [
"arn:aws:sns:*:*:*GroundTruth*",
"arn:aws:sns:*:*:*Groundtruth*",
"arn:aws:sns:*:*:*groundTruth*",
"arn:aws:sns:*:*:*groundtruth*",
"arn:aws:sns:*:*:*SageMaker*",
"arn:aws:sns:*:*:*Sagemaker*",
"arn:aws:sns:*:*:*sageMaker*",
"arn:aws:sns:*:*:*sagemaker*"
],
"Condition" : {
"StringEquals" : {
"sns:Protocol" : "sqs"
},
"StringLike" : {
"sns:Endpoint" : "arn:aws:sqs:*:*:*GroundTruth*"
}
}
},
{
"Sid" : "StreamingTopic",
"Effect" : "Allow",
"Action" : [
"sns:Publish"
],
"Resource" : [
"arn:aws:sns:*:*:*GroundTruth*",
"arn:aws:sns:*:*:*Groundtruth*",
"arn:aws:sns:*:*:*groundTruth*",
"arn:aws:sns:*:*:*groundtruth*",
"arn:aws:sns:*:*:*SageMaker*",
"arn:aws:sns:*:*:*Sagemaker*",
"arn:aws:sns:*:*:*sageMaker*",
"arn:aws:sns:*:*:*sagemaker*"
]
},
{
"Sid" : "StreamingTopicUnsubscribe",
"Effect" : "Allow",
"Action" : [
"sns:Unsubscribe"
],
"Resource" : "*"
},
{
"Sid" : "WorkforceVPC",
"Effect" : "Allow",
"Action" : [
"ec2:CreateVpcEndpoint",
"ec2:DescribeVpcEndpoints",
"ec2:DeleteVpcEndpoints"
],
"Resource" : "*",
"Condition" : {
"StringLikeIfExists" : {
"ec2:VpceServiceName" : [
"*sagemaker-task-resources*",
"aws.sagemaker*labeling*"
]
}
}
}
]
}進一步了解
