Permissions for SOCI indexing

Create SOCI indexes for your container images and store them in Amazon ECR before using SOCI indexing with Amazon SageMaker Studio or Amazon SageMaker Unified Studio.

Prerequisites

Amazon Web Services account with an Amazon Identity and Access Management (IAM) role with permissions to manage
- Amazon ECR
- Amazon SageMaker AI
Amazon ECR private repositories for storing your container images
Amazon CLI v2.0+ configured with appropriate credentials
The following container tools:
- Required: soci-snapshotter
- Options:
  - nerdctl
  - finch

Your IAM role needs permissions to:

Create and manage SageMaker AI resources (domains, images, app configs).
- You may use the SageMakerFullAccess Amazon managed policy. For more permission details, see Amazon managed policy: AmazonSageMakerFullAccess.
IAM permissions for pushing an image to an Amazon ECR private repository.

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Speed up container startup with SOCI

Create SOCI indexes with nerdctl and SOCI CLI example