Amazon SageMaker Prerequisites
Before you can get set up with Amazon SageMaker:
-
Required: You will need to create an Amazon Web Services (Amazon) account to get access to all of the Amazon services and resources for the account.
-
Highly recommended: We highly recommend that you create an administrative user to manage Amazon resources for the account, to adhere to the Security best practices in IAM. It is assumed that you have an administrative user for many of the administrative tasks throughout the SageMaker developer guide.
-
Optional: Configure the Amazon Command Line Interface (Amazon CLI) if you intend to manage your Amazon services and resources for the account using the Amazon CLI.
Sign up for an Amazon Web Services account
If you do not have an Amazon Web Services account, use the following procedure to create one.
To sign up for Amazon Web Services
Open http://www.amazonaws.cn/
and choose Sign Up. Follow the on-screen instructions.
Amazon sends you a confirmation email after the sign-up process is
complete. At any time, you can view your current account activity and manage your account by
going to http://www.amazonaws.cn/
Secure IAM users
After you sign up for an Amazon Web Services account, safeguard your administrative user by turning on multi-factor authentication (MFA). For instructions, see Enable a virtual MFA device for an IAM user (console) in the IAM User Guide.
To give other users access to your Amazon Web Services account resources, create IAM users. To secure your IAM users, turn on MFA and only give the IAM users the permissions needed to perform their tasks.
For more information about creating and securing IAM users, see the following topics in the IAM User Guide:
When you create an administrative user to set up SageMaker, the administrative user should include specific permissions to create SageMaker resources. To view the permissions, expand the following administrator permissions section.
When you create your administrative user using the preceding instructions, your
administrative user should already include the permissions contained in the AmazonSageMakerFullAccess
If you intend to create your own custom policy, these permissions are required to create a domain and get set up with SageMaker. For information about adding policies, see Adding and removing IAM identity permissions in the Amazon Identity and Access Management User Guide.
{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "sagemaker:*" ], "Resource": [ "arn:aws:sagemaker:*:*:domain/*", "arn:aws:sagemaker:*:*:user-profile/*", "arn:aws:sagemaker:*:*:app/*", "arn:aws:sagemaker:*:*:flow-definition/*" ] }, { "Effect": "Allow", "Action": [ "iam:GetRole", "servicecatalog:*" ], "Resource": [ "*" ] } ] }
Optional: If you intend to manage your Amazon services and resources for the account using the Amazon CLI, proceed to the following instructions ((Optional) Configure the Amazon CLI).
After you have completed your prerequisites, continue on to the setup instructions. You can continue on to your setup instructions by choosing one of the following options.
-
Quick setup: Fastest setup for individual users with default settings.
-
Custom setup: Advanced setup for enterprise Machine Learning (ML) administrators. Ideal option for ML administrators setting up SageMaker for many users or an organization.
(Optional) Configure the Amazon CLI
To manage your domain and other Amazon services and resources using the Amazon CLI, complete the setup in Set up the Amazon CLI in the Amazon Command Line Interface User Guide for Version 2.
After you have completed your prerequisites, continue on to the setup instructions. You can continue on to your setup instructions by choosing one of the following options.
-
Quick setup: Fastest setup for individual users with default settings.
-
Custom setup: Advanced setup for enterprise Machine Learning (ML) administrators. Ideal option for ML administrators setting up SageMaker for many users or an organization.