ExportEarthObservationJob API：執行角色許可

如需採用能夠在 ExportEarthObservationJob API 請求中進行傳遞的執行角色，則可以將以下最低許可政策連接至角色：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:AbortMultipartUpload",
                "s3:PutObject",
                "s3:GetObject",
                "s3:ListBucketMultipartUploads"
            ],
            "Resource": [
                "arn:aws:s3:::*SageMaker*",
                "arn:aws:s3:::*Sagemaker*",
                "arn:aws:s3:::*sagemaker*"
            ]
        },
        {
        "Effect": "Allow",
        "Action": "sagemaker-geospatial:GetEarthObservationJob",
        "Resource":  "arn:aws:sagemaker-geospatial:*:*:earth-observation-job/*"
        }
    ]
    }

如果您的輸入 Amazon S3 儲存貯體使用伺服器端加密搭配 AWS KMS 受管金鑰 (SSE-KMS) 進行加密，請參閱使用 Amazon S3 儲存貯體金鑰以取得詳細資訊。