Operations Actions Permission-only actions Resource types Condition keys

Actions, resources, and condition keys for Amazon SageMaker

Amazon SageMaker (service prefix: sagemaker) provides the following service-specific operations, resources, actions, and condition keys for use in IAM permission policies.

References:

Learn how to configure this service.
View a list of the API operations available for this service.
Learn how to secure this service and its resources by using IAM permission policies.
View the programmatic service authorization reference for this service.

Topics

API operations defined by Amazon SageMaker
Actions defined by Amazon SageMaker
Permission-only actions for Amazon SageMaker
Resource types defined by Amazon SageMaker
Condition keys for Amazon SageMaker

API operations defined by Amazon SageMaker

The following table maps API operations to the IAM actions they authorize. Only condition keys that have static values for the given API and action are listed; for the full set of condition keys supported by each action, see the Actions table.

Operation	SDK client	IAM action	Condition key	Possible value(s)	Access level
AddAssociation	sagemaker	sagemaker:AddAssociation			Write
AddTags	sagemaker	sagemaker:AddTags			Tagging, Write
AssociateTrialComponent	sagemaker	sagemaker:AssociateTrialComponent			Write
AttachClusterNodeVolume	sagemaker	sagemaker:AttachClusterNodeVolume			Write
BatchAddClusterNodes	sagemaker	sagemaker:BatchAddClusterNodes			Write
BatchDeleteClusterNodes	sagemaker	sagemaker:BatchDeleteClusterNodes			Write
BatchDescribeModelPackage	sagemaker	sagemaker:BatchDescribeModelPackage			Read
CreateAIBenchmarkJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateAIBenchmarkJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateAIRecommendationJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateAIRecommendationJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateAIWorkloadConfig	sagemaker	sagemaker:AddTags			Tagging, Write
CreateAIWorkloadConfig	sagemaker	sagemaker:CreateAIWorkloadConfig			Write
CreateAction	sagemaker	sagemaker:AddTags			Tagging, Write
CreateAction	sagemaker	sagemaker:CreateAction			Write
CreateAlgorithm	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateAlgorithm			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateApp	sagemaker	sagemaker:AddTags			Tagging, Write
CreateApp	sagemaker	sagemaker:CreateApp			Write
CreateAppImageConfig	sagemaker	sagemaker:AddTags			Tagging, Write
CreateAppImageConfig	sagemaker	sagemaker:CreateAppImageConfig			Write
CreateArtifact	sagemaker	sagemaker:AddTags			Tagging, Write
CreateArtifact	sagemaker	sagemaker:CreateArtifact			Write
CreateAutoMLJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateAutoMLJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateAutoMLJobV2	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateAutoMLJobV2			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateCluster	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateCluster			Write
		sagemaker:UpdateClusterSoftware			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateClusterSchedulerConfig	sagemaker	sagemaker:AddTags			Tagging, Write
CreateClusterSchedulerConfig	sagemaker	sagemaker:CreateClusterSchedulerConfig			Write
CreateCodeRepository	sagemaker	sagemaker:AddTags			Tagging, Write
CreateCodeRepository	sagemaker	sagemaker:CreateCodeRepository			Write
CreateCompilationJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateCompilationJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateComputeQuota	sagemaker	sagemaker:AddTags			Tagging, Write
CreateComputeQuota	sagemaker	sagemaker:CreateComputeQuota			Write
CreateContext	sagemaker	sagemaker:AddTags			Tagging, Write
CreateContext	sagemaker	sagemaker:CreateContext			Write
CreateDataQualityJobDefinition	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateDataQualityJobDefinition			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateDomain	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateDomain			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateEndpoint	sagemaker	sagemaker:AddTags			Tagging, Write
CreateEndpoint	sagemaker	sagemaker:CreateEndpoint			Write
CreateEndpointConfig	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateEndpointConfig			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateExperiment	sagemaker	sagemaker:AddTags			Tagging, Write
CreateExperiment	sagemaker	sagemaker:CreateExperiment			Write
CreateFeatureGroup	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateFeatureGroup			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateFlowDefinition	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateFlowDefinition			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateHub	sagemaker	sagemaker:AddTags			Tagging, Write
CreateHub	sagemaker	sagemaker:CreateHub			Write
CreateHubContentPresignedUrls	sagemaker	sagemaker:CreateHubContentPresignedUrls			Read
CreateHubContentReference	sagemaker	sagemaker:AddTags			Tagging, Write
CreateHubContentReference	sagemaker	sagemaker:CreateHubContentReference			Write
CreateHumanTaskUi	sagemaker	sagemaker:AddTags			Tagging, Write
CreateHumanTaskUi	sagemaker	sagemaker:CreateHumanTaskUi			Write
CreateHyperParameterTuningJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateHyperParameterTuningJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateImage	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateImage			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateImageVersion	sagemaker	sagemaker:CreateImageVersion			Write
CreateInferenceComponent	sagemaker	sagemaker:AddTags			Tagging, Write
CreateInferenceComponent	sagemaker	sagemaker:CreateInferenceComponent			Write
CreateInferenceExperiment	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateInferenceExperiment			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateInferenceRecommendationsJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateInferenceRecommendationsJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateJob			Write
		sagemaker:ImportHubContent			Write
		sagemaker:UpdateHubContent			Write
		iam:PassRole	iam:PassedToService	job.sagemaker.amazonaws.com, sagemaker.amazonaws.com	Write
CreateLabelingJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateLabelingJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateMlflowApp	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateMlflowApp			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateMlflowTrackingServer	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateMlflowTrackingServer			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateModel	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateModel			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateModelBiasJobDefinition	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateModelBiasJobDefinition			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateModelCard	sagemaker	sagemaker:AddTags			Tagging, Write
CreateModelCard	sagemaker	sagemaker:CreateModelCard			Write
CreateModelCardExportJob	sagemaker	sagemaker:CreateModelCardExportJob			Write
CreateModelExplainabilityJobDefinition	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateModelExplainabilityJobDefinition			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateModelPackage	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateModelPackage			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateModelPackageGroup	sagemaker	sagemaker:AddTags			Tagging, Write
CreateModelPackageGroup	sagemaker	sagemaker:CreateModelPackageGroup			Write
CreateModelQualityJobDefinition	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateModelQualityJobDefinition			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateMonitoringSchedule	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateMonitoringSchedule			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateNotebookInstance	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateNotebookInstance			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateNotebookInstanceLifecycleConfig	sagemaker	sagemaker:AddTags			Tagging, Write
CreateNotebookInstanceLifecycleConfig	sagemaker	sagemaker:CreateNotebookInstanceLifecycleConfig			Write
CreateOptimizationJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateOptimizationJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreatePartnerApp	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreatePartnerApp			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreatePartnerAppPresignedUrl	sagemaker	sagemaker:CreatePartnerAppPresignedUrl			Write
CreatePipeline	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreatePipeline			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreatePresignedDomainUrl	sagemaker	sagemaker:CreatePresignedDomainUrl			Write
CreatePresignedMlflowAppUrl	sagemaker	sagemaker:CreatePresignedMlflowAppUrl			Write
CreatePresignedMlflowTrackingServerUrl	sagemaker	sagemaker:CreatePresignedMlflowTrackingServerUrl			Write
CreatePresignedNotebookInstanceUrl	sagemaker	sagemaker:CreatePresignedNotebookInstanceUrl			Write
CreateProcessingJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateProcessingJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateProject	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateProject			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateSpace	sagemaker	sagemaker:AddTags			Tagging, Write
CreateSpace	sagemaker	sagemaker:CreateSpace			Write
CreateStudioLifecycleConfig	sagemaker	sagemaker:AddTags			Tagging, Write
CreateStudioLifecycleConfig	sagemaker	sagemaker:CreateStudioLifecycleConfig			Write
CreateTrainingJob	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateTrainingJob			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateTrainingPlan	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateReservedCapacity			Write
		sagemaker:CreateTrainingPlan			Write
CreateTransformJob	sagemaker	sagemaker:AddTags			Tagging, Write
CreateTransformJob	sagemaker	sagemaker:CreateTransformJob			Write
CreateTrial	sagemaker	sagemaker:AddTags			Tagging, Write
CreateTrial	sagemaker	sagemaker:CreateTrial			Write
CreateTrialComponent	sagemaker	sagemaker:AddTags			Tagging, Write
CreateTrialComponent	sagemaker	sagemaker:CreateTrialComponent			Write
CreateUserProfile	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:CreateUserProfile			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
CreateWorkforce	sagemaker	sagemaker:AddTags			Tagging, Write
CreateWorkforce	sagemaker	sagemaker:CreateWorkforce			Write
CreateWorkteam	sagemaker	sagemaker:AddTags			Tagging, Write
CreateWorkteam	sagemaker	sagemaker:CreateWorkteam			Write
DeleteAIBenchmarkJob	sagemaker	sagemaker:DeleteAIBenchmarkJob			Write
DeleteAIRecommendationJob	sagemaker	sagemaker:DeleteAIRecommendationJob			Write
DeleteAIWorkloadConfig	sagemaker	sagemaker:DeleteAIWorkloadConfig			Write
DeleteAction	sagemaker	sagemaker:DeleteAction			Write
DeleteAlgorithm	sagemaker	sagemaker:DeleteAlgorithm			Write
DeleteApp	sagemaker	sagemaker:DeleteApp			Write
DeleteAppImageConfig	sagemaker	sagemaker:DeleteAppImageConfig			Write
DeleteArtifact	sagemaker	sagemaker:DeleteArtifact			Write
DeleteAssociation	sagemaker	sagemaker:DeleteAssociation			Write
DeleteCluster	sagemaker	sagemaker:DeleteCluster			Write
DeleteClusterSchedulerConfig	sagemaker	sagemaker:DeleteClusterSchedulerConfig			Write
DeleteCodeRepository	sagemaker	sagemaker:DeleteCodeRepository			Write
DeleteCompilationJob	sagemaker	sagemaker:DeleteCompilationJob			Write
DeleteComputeQuota	sagemaker	sagemaker:DeleteComputeQuota			Write
DeleteContext	sagemaker	sagemaker:DeleteContext			Write
DeleteDataQualityJobDefinition	sagemaker	sagemaker:DeleteDataQualityJobDefinition			Write
DeleteDomain	sagemaker	sagemaker:DeleteDomain			Write
DeleteEndpoint	sagemaker	sagemaker:DeleteEndpoint			Write
DeleteEndpointConfig	sagemaker	sagemaker:DeleteEndpointConfig			Write
DeleteExperiment	sagemaker	sagemaker:DeleteExperiment			Write
DeleteFeatureGroup	sagemaker	sagemaker:DeleteFeatureGroup			Write
DeleteFlowDefinition	sagemaker	sagemaker:DeleteFlowDefinition			Write
DeleteHub	sagemaker	sagemaker:DeleteHub			Write
DeleteHubContent	sagemaker	sagemaker:DeleteHubContent			Write
DeleteHubContentReference	sagemaker	sagemaker:DeleteHubContentReference			Write
DeleteHumanTaskUi	sagemaker	sagemaker:DeleteHumanTaskUi			Write
DeleteHyperParameterTuningJob	sagemaker	sagemaker:DeleteHyperParameterTuningJob			Write
DeleteImage	sagemaker	sagemaker:DeleteImage			Write
DeleteImageVersion	sagemaker	sagemaker:DeleteImageVersion			Write
DeleteInferenceComponent	sagemaker	sagemaker:DeleteInferenceComponent			Write
DeleteInferenceExperiment	sagemaker	sagemaker:DeleteInferenceExperiment			Write
DeleteJob	sagemaker	sagemaker:DeleteJob			Write
DeleteMlflowApp	sagemaker	sagemaker:DeleteMlflowApp			Write
DeleteMlflowTrackingServer	sagemaker	sagemaker:DeleteMlflowTrackingServer			Write
DeleteModel	sagemaker	sagemaker:DeleteModel			Write
DeleteModelBiasJobDefinition	sagemaker	sagemaker:DeleteModelBiasJobDefinition			Write
DeleteModelCard	sagemaker	sagemaker:DeleteModelCard			Write
DeleteModelExplainabilityJobDefinition	sagemaker	sagemaker:DeleteModelExplainabilityJobDefinition			Write
DeleteModelPackage	sagemaker	sagemaker:DeleteModelPackage			Write
DeleteModelPackageGroup	sagemaker	sagemaker:DeleteModelPackageGroup			Write
DeleteModelPackageGroupPolicy	sagemaker	sagemaker:DeleteModelPackageGroupPolicy			Write
DeleteModelQualityJobDefinition	sagemaker	sagemaker:DeleteModelQualityJobDefinition			Write
DeleteMonitoringSchedule	sagemaker	sagemaker:DeleteMonitoringSchedule			Write
DeleteNotebookInstance	sagemaker	sagemaker:DeleteNotebookInstance			Write
DeleteNotebookInstanceLifecycleConfig	sagemaker	sagemaker:DeleteNotebookInstanceLifecycleConfig			Write
DeleteOptimizationJob	sagemaker	sagemaker:DeleteOptimizationJob			Write
DeletePartnerApp	sagemaker	sagemaker:DeletePartnerApp			Write
DeletePipeline	sagemaker	sagemaker:DeletePipeline			Write
DeleteProcessingJob	sagemaker	sagemaker:DeleteProcessingJob			Write
DeleteProject	sagemaker	sagemaker:DeleteProject			Write
DeleteSpace	sagemaker	sagemaker:DeleteSpace			Write
DeleteStudioLifecycleConfig	sagemaker	sagemaker:DeleteStudioLifecycleConfig			Write
DeleteTags	sagemaker	sagemaker:DeleteTags			Tagging, Write
DeleteTrainingJob	sagemaker	sagemaker:DeleteTrainingJob			Write
DeleteTrial	sagemaker	sagemaker:DeleteTrial			Write
DeleteTrialComponent	sagemaker	sagemaker:DeleteTrialComponent			Write
DeleteUserProfile	sagemaker	sagemaker:DeleteUserProfile			Write
DeleteWorkforce	sagemaker	sagemaker:DeleteWorkforce			Write
DeleteWorkteam	sagemaker	sagemaker:DeleteWorkteam			Write
DescribeAIBenchmarkJob	sagemaker	sagemaker:DescribeAIBenchmarkJob			Read
DescribeAIRecommendationJob	sagemaker	sagemaker:DescribeAIRecommendationJob			Read
DescribeAIWorkloadConfig	sagemaker	sagemaker:DescribeAIWorkloadConfig			Read
DescribeAction	sagemaker	sagemaker:DescribeAction			Read
DescribeAlgorithm	sagemaker	sagemaker:DescribeAlgorithm			Read
DescribeApp	sagemaker	sagemaker:DescribeApp			Read
DescribeAppImageConfig	sagemaker	sagemaker:DescribeAppImageConfig			Read
DescribeArtifact	sagemaker	sagemaker:DescribeArtifact			Read
DescribeAutoMLJob	sagemaker	sagemaker:DescribeAutoMLJob			Read
DescribeAutoMLJobV2	sagemaker	sagemaker:DescribeAutoMLJobV2			Read
DescribeCluster	sagemaker	sagemaker:DescribeCluster			Read
DescribeClusterEvent	sagemaker	sagemaker:DescribeClusterEvent			Read
DescribeClusterNode	sagemaker	sagemaker:DescribeClusterNode			Read
DescribeClusterSchedulerConfig	sagemaker	sagemaker:DescribeClusterSchedulerConfig			Read
DescribeCodeRepository	sagemaker	sagemaker:DescribeCodeRepository			Read
DescribeCompilationJob	sagemaker	sagemaker:DescribeCompilationJob			Read
DescribeComputeQuota	sagemaker	sagemaker:DescribeComputeQuota			Read
DescribeContext	sagemaker	sagemaker:DescribeContext			Read
DescribeDataQualityJobDefinition	sagemaker	sagemaker:DescribeDataQualityJobDefinition			Read
DescribeDomain	sagemaker	sagemaker:DescribeDomain			Read
DescribeEndpoint	sagemaker	sagemaker:DescribeEndpoint			Read
DescribeEndpointConfig	sagemaker	sagemaker:DescribeEndpointConfig			Read
DescribeExperiment	sagemaker	sagemaker:DescribeExperiment			Read
DescribeFeatureGroup	sagemaker	sagemaker:DescribeFeatureGroup			Read
DescribeFeatureMetadata	sagemaker	sagemaker:DescribeFeatureMetadata			Read
DescribeFlowDefinition	sagemaker	sagemaker:DescribeFlowDefinition			Read
DescribeHub	sagemaker	sagemaker:DescribeHub			Read
DescribeHubContent	sagemaker	sagemaker:DescribeHubContent			Read
DescribeHumanTaskUi	sagemaker	sagemaker:DescribeHumanTaskUi			Read
DescribeHyperParameterTuningJob	sagemaker	sagemaker:DescribeHyperParameterTuningJob			Read
DescribeImage	sagemaker	sagemaker:DescribeImage			Read
DescribeImageVersion	sagemaker	sagemaker:DescribeImageVersion			Read
DescribeInferenceComponent	sagemaker	sagemaker:DescribeInferenceComponent			Read
DescribeInferenceExperiment	sagemaker	sagemaker:DescribeInferenceExperiment			Read
DescribeInferenceRecommendationsJob	sagemaker	sagemaker:DescribeInferenceRecommendationsJob			Read
DescribeJob	sagemaker	sagemaker:DescribeJob			Read
DescribeJobSchemaVersion	sagemaker	sagemaker:DescribeJobSchemaVersion			Read
DescribeLabelingJob	sagemaker	sagemaker:DescribeLabelingJob			Read
DescribeLineageGroup	sagemaker	sagemaker:DescribeLineageGroup			Read
DescribeMlflowApp	sagemaker	sagemaker:DescribeMlflowApp			Read
DescribeMlflowTrackingServer	sagemaker	sagemaker:DescribeMlflowTrackingServer			Read
DescribeModel	sagemaker	sagemaker:DescribeModel			Read
DescribeModelBiasJobDefinition	sagemaker	sagemaker:DescribeModelBiasJobDefinition			Read
DescribeModelCard	sagemaker	sagemaker:DescribeModelCard			Read
DescribeModelCardExportJob	sagemaker	sagemaker:DescribeModelCardExportJob			Read
DescribeModelExplainabilityJobDefinition	sagemaker	sagemaker:DescribeModelExplainabilityJobDefinition			Read
DescribeModelPackage	sagemaker	sagemaker:DescribeModelPackage			Read
DescribeModelPackageGroup	sagemaker	sagemaker:DescribeModelPackageGroup			Read
DescribeModelQualityJobDefinition	sagemaker	sagemaker:DescribeModelQualityJobDefinition			Read
DescribeMonitoringSchedule	sagemaker	sagemaker:DescribeMonitoringSchedule			Read
DescribeNotebookInstance	sagemaker	sagemaker:DescribeNotebookInstance			Read
DescribeNotebookInstanceLifecycleConfig	sagemaker	sagemaker:DescribeNotebookInstanceLifecycleConfig			Read
DescribeOptimizationJob	sagemaker	sagemaker:DescribeOptimizationJob			Read
DescribePartnerApp	sagemaker	sagemaker:DescribePartnerApp			Read
DescribePipeline	sagemaker	sagemaker:DescribePipeline			Read
DescribePipelineDefinitionForExecution	sagemaker	sagemaker:DescribePipelineDefinitionForExecution			Read
DescribePipelineExecution	sagemaker	sagemaker:DescribePipelineExecution			Read
DescribeProcessingJob	sagemaker	sagemaker:DescribeProcessingJob			Read
DescribeProject	sagemaker	sagemaker:DescribeProject			Read
DescribeReservedCapacity	sagemaker	sagemaker:DescribeReservedCapacity			Read
DescribeSpace	sagemaker	sagemaker:DescribeSpace			Read
DescribeStudioLifecycleConfig	sagemaker	sagemaker:DescribeStudioLifecycleConfig			Read
DescribeSubscribedWorkteam	sagemaker	sagemaker:DescribeSubscribedWorkteam			Read
DescribeTrainingJob	sagemaker	sagemaker:DescribeTrainingJob			Read
DescribeTrainingPlan	sagemaker	sagemaker:DescribeTrainingPlan			Read
DescribeTransformJob	sagemaker	sagemaker:DescribeTransformJob			Read
DescribeTrial	sagemaker	sagemaker:DescribeTrial			Read
DescribeTrialComponent	sagemaker	sagemaker:DescribeTrialComponent			Read
DescribeUserProfile	sagemaker	sagemaker:DescribeUserProfile			Read
DescribeWorkforce	sagemaker	sagemaker:DescribeWorkforce			Read
DescribeWorkteam	sagemaker	sagemaker:DescribeWorkteam			Read
DetachClusterNodeVolume	sagemaker	sagemaker:DetachClusterNodeVolume			Write
DisableSagemakerServicecatalogPortfolio	sagemaker	sagemaker:DisableSagemakerServicecatalogPortfolio			Write
DisassociateTrialComponent	sagemaker	sagemaker:DisassociateTrialComponent			Write
EnableSagemakerServicecatalogPortfolio	sagemaker	sagemaker:EnableSagemakerServicecatalogPortfolio			Write
GetLineageGroupPolicy	sagemaker	sagemaker:GetLineageGroupPolicy			Read
GetModelPackageGroupPolicy	sagemaker	sagemaker:GetModelPackageGroupPolicy			Read
GetSagemakerServicecatalogPortfolioStatus	sagemaker	sagemaker:GetSagemakerServicecatalogPortfolioStatus			Read
GetScalingConfigurationRecommendation	sagemaker	sagemaker:GetScalingConfigurationRecommendation			Read
GetSearchSuggestions	sagemaker	sagemaker:GetSearchSuggestions			Read
ImportHubContent	sagemaker	sagemaker:AddTags			Tagging, Write
		sagemaker:ImportHubContent			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
ListAIBenchmarkJobs	sagemaker	sagemaker:ListAIBenchmarkJobs			List
ListAIRecommendationJobs	sagemaker	sagemaker:ListAIRecommendationJobs			List
ListAIWorkloadConfigs	sagemaker	sagemaker:ListAIWorkloadConfigs			List
ListActions	sagemaker	sagemaker:ListActions			List
ListAlgorithms	sagemaker	sagemaker:ListAlgorithms			List
ListAliases	sagemaker	sagemaker:ListAliases			List
ListAppImageConfigs	sagemaker	sagemaker:ListAppImageConfigs			List
ListApps	sagemaker	sagemaker:ListApps			List
ListArtifacts	sagemaker	sagemaker:ListArtifacts			List
ListAssociations	sagemaker	sagemaker:ListAssociations			List
ListAutoMLJobs	sagemaker	sagemaker:ListAutoMLJobs			List
ListCandidatesForAutoMLJob	sagemaker	sagemaker:ListCandidatesForAutoMLJob			List
ListClusterEvents	sagemaker	sagemaker:ListClusterEvents			List
ListClusterNodes	sagemaker	sagemaker:ListClusterNodes			List
ListClusterSchedulerConfigs	sagemaker	sagemaker:ListClusterSchedulerConfigs			List
ListClusters	sagemaker	sagemaker:ListClusters			List
ListCodeRepositories	sagemaker	sagemaker:ListCodeRepositories			List
ListCompilationJobs	sagemaker	sagemaker:ListCompilationJobs			List
ListComputeQuotas	sagemaker	sagemaker:ListComputeQuotas			List
ListContexts	sagemaker	sagemaker:ListContexts			List
ListDataQualityJobDefinitions	sagemaker	sagemaker:ListDataQualityJobDefinitions			List
ListDomains	sagemaker	sagemaker:ListDomains			List
ListEndpointConfigs	sagemaker	sagemaker:ListEndpointConfigs			List
ListEndpoints	sagemaker	sagemaker:ListEndpoints			List
ListExperiments	sagemaker	sagemaker:ListExperiments			List
ListFeatureGroups	sagemaker	sagemaker:ListFeatureGroups			List
ListFlowDefinitions	sagemaker	sagemaker:ListFlowDefinitions			List
ListHubContentVersions	sagemaker	sagemaker:ListHubContentVersions			List
ListHubContents	sagemaker	sagemaker:ListHubContents			List
ListHubs	sagemaker	sagemaker:ListHubs			List
ListHumanTaskUis	sagemaker	sagemaker:ListHumanTaskUis			List
ListHyperParameterTuningJobs	sagemaker	sagemaker:ListHyperParameterTuningJobs			List
ListImageVersions	sagemaker	sagemaker:ListImageVersions			List
ListImages	sagemaker	sagemaker:ListImages			List
ListInferenceComponents	sagemaker	sagemaker:ListInferenceComponents			List
ListInferenceExperiments	sagemaker	sagemaker:ListInferenceExperiments			List
ListInferenceRecommendationsJobSteps	sagemaker	sagemaker:ListInferenceRecommendationsJobSteps			List
ListInferenceRecommendationsJobs	sagemaker	sagemaker:ListInferenceRecommendationsJobs			List
ListJobSchemaVersions	sagemaker	sagemaker:ListJobSchemaVersions			List
ListJobs	sagemaker	sagemaker:ListJobs			List
ListLabelingJobs	sagemaker	sagemaker:ListLabelingJobs			List
ListLabelingJobsForWorkteam	sagemaker	sagemaker:ListLabelingJobsForWorkteam			List
ListLineageGroups	sagemaker	sagemaker:ListLineageGroups			List
ListMlflowApps	sagemaker	sagemaker:ListMlflowApps			List
ListMlflowTrackingServers	sagemaker	sagemaker:ListMlflowTrackingServers			List
ListModelBiasJobDefinitions	sagemaker	sagemaker:ListModelBiasJobDefinitions			List
ListModelCardExportJobs	sagemaker	sagemaker:ListModelCardExportJobs			List
ListModelCardVersions	sagemaker	sagemaker:ListModelCardVersions			List
ListModelCards	sagemaker	sagemaker:ListModelCards			List
ListModelExplainabilityJobDefinitions	sagemaker	sagemaker:ListModelExplainabilityJobDefinitions			List
ListModelMetadata	sagemaker	sagemaker:ListModelMetadata			List
ListModelPackageGroups	sagemaker	sagemaker:ListModelPackageGroups			List
ListModelPackages	sagemaker	sagemaker:ListModelPackages			List
ListModelQualityJobDefinitions	sagemaker	sagemaker:ListModelQualityJobDefinitions			List
ListModels	sagemaker	sagemaker:ListModels			List
ListMonitoringAlertHistory	sagemaker	sagemaker:ListMonitoringAlertHistory			List
ListMonitoringAlerts	sagemaker	sagemaker:ListMonitoringAlerts			List
ListMonitoringExecutions	sagemaker	sagemaker:ListMonitoringExecutions			List
ListMonitoringSchedules	sagemaker	sagemaker:ListMonitoringSchedules			List
ListNotebookInstanceLifecycleConfigs	sagemaker	sagemaker:ListNotebookInstanceLifecycleConfigs			List
ListNotebookInstances	sagemaker	sagemaker:ListNotebookInstances			List
ListOptimizationJobs	sagemaker	sagemaker:ListOptimizationJobs			List
ListPartnerApps	sagemaker	sagemaker:ListPartnerApps			List
ListPipelineExecutionSteps	sagemaker	sagemaker:ListPipelineExecutionSteps			List
ListPipelineExecutions	sagemaker	sagemaker:ListPipelineExecutions			List
ListPipelineParametersForExecution	sagemaker	sagemaker:ListPipelineParametersForExecution			List
ListPipelineVersions	sagemaker	sagemaker:ListPipelineVersions			List
ListPipelines	sagemaker	sagemaker:ListPipelines			List
ListProcessingJobs	sagemaker	sagemaker:ListProcessingJobs			List
ListProjects	sagemaker	sagemaker:ListProjects			List
ListResourceCatalogs	sagemaker	sagemaker:ListResourceCatalogs			List
ListSpaces	sagemaker	sagemaker:ListSpaces			List
ListStudioLifecycleConfigs	sagemaker	sagemaker:ListStudioLifecycleConfigs			List
ListSubscribedWorkteams	sagemaker	sagemaker:ListSubscribedWorkteams			List
ListTags	sagemaker	sagemaker:ListTags			List
ListTrainingJobs	sagemaker	sagemaker:ListTrainingJobs			List
ListTrainingJobsForHyperParameterTuningJob	sagemaker	sagemaker:ListTrainingJobsForHyperParameterTuningJob			List
ListTrainingPlans	sagemaker	sagemaker:ListTrainingPlans			List
ListTransformJobs	sagemaker	sagemaker:ListTransformJobs			List
ListTrialComponents	sagemaker	sagemaker:ListTrialComponents			List
ListTrials	sagemaker	sagemaker:ListTrials			List
ListUltraServersByReservedCapacity	sagemaker	sagemaker:ListUltraServersByReservedCapacity			List
ListUserProfiles	sagemaker	sagemaker:ListUserProfiles			List
ListWorkforces	sagemaker	sagemaker:ListWorkforces			List
ListWorkteams	sagemaker	sagemaker:ListWorkteams			List
PutModelPackageGroupPolicy	sagemaker	sagemaker:PutModelPackageGroupPolicy			Write
QueryLineage	sagemaker	sagemaker:QueryLineage			List
RenderUiTemplate	sagemaker	sagemaker:RenderUiTemplate			Read
RenderUiTemplate	sagemaker	iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
RetryPipelineExecution	sagemaker	sagemaker:RetryPipelineExecution			Write
Search	sagemaker	sagemaker:Search			Read
SearchTrainingPlanOfferings	sagemaker	sagemaker:SearchTrainingPlanOfferings			Read
SendPipelineExecutionStepFailure	sagemaker	sagemaker:SendPipelineExecutionStepFailure			Write
SendPipelineExecutionStepSuccess	sagemaker	sagemaker:SendPipelineExecutionStepSuccess			Write
StartClusterHealthCheck	sagemaker	sagemaker:StartClusterHealthCheck			Write
StartInferenceExperiment	sagemaker	sagemaker:StartInferenceExperiment			Write
StartMlflowTrackingServer	sagemaker	sagemaker:StartMlflowTrackingServer			Write
StartMonitoringSchedule	sagemaker	sagemaker:StartMonitoringSchedule			Write
StartNotebookInstance	sagemaker	sagemaker:StartNotebookInstance			Write
StartPipelineExecution	sagemaker	sagemaker:StartPipelineExecution			Write
StartSession	sagemaker	sagemaker:StartSession			Write
StopAIBenchmarkJob	sagemaker	sagemaker:StopAIBenchmarkJob			Write
StopAIRecommendationJob	sagemaker	sagemaker:StopAIRecommendationJob			Write
StopAutoMLJob	sagemaker	sagemaker:StopAutoMLJob			Write
StopCompilationJob	sagemaker	sagemaker:StopCompilationJob			Write
StopHyperParameterTuningJob	sagemaker	sagemaker:StopHyperParameterTuningJob			Write
StopInferenceExperiment	sagemaker	sagemaker:StopInferenceExperiment			Write
StopInferenceRecommendationsJob	sagemaker	sagemaker:StopInferenceRecommendationsJob			Write
StopJob	sagemaker	sagemaker:StopJob			Write
StopLabelingJob	sagemaker	sagemaker:StopLabelingJob			Write
StopMlflowTrackingServer	sagemaker	sagemaker:StopMlflowTrackingServer			Write
StopMonitoringSchedule	sagemaker	sagemaker:StopMonitoringSchedule			Write
StopNotebookInstance	sagemaker	sagemaker:StopNotebookInstance			Write
StopOptimizationJob	sagemaker	sagemaker:StopOptimizationJob			Write
StopPipelineExecution	sagemaker	sagemaker:StopPipelineExecution			Write
StopProcessingJob	sagemaker	sagemaker:StopProcessingJob			Write
StopTrainingJob	sagemaker	sagemaker:StopTrainingJob			Write
StopTransformJob	sagemaker	sagemaker:StopTransformJob			Write
UpdateAction	sagemaker	sagemaker:UpdateAction			Write
UpdateAppImageConfig	sagemaker	sagemaker:UpdateAppImageConfig			Write
UpdateArtifact	sagemaker	sagemaker:UpdateArtifact			Write
UpdateCluster	sagemaker	sagemaker:BatchAddClusterNodes			Write
		sagemaker:BatchDeleteClusterNodes			Write
		sagemaker:UpdateCluster			Write
		sagemaker:UpdateClusterSoftware			Write
		iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
UpdateClusterSchedulerConfig	sagemaker	sagemaker:UpdateClusterSchedulerConfig			Write
UpdateClusterSoftware	sagemaker	sagemaker:UpdateClusterSoftware			Write
UpdateCodeRepository	sagemaker	sagemaker:UpdateCodeRepository			Write
UpdateComputeQuota	sagemaker	sagemaker:UpdateComputeQuota			Write
UpdateContext	sagemaker	sagemaker:UpdateContext			Write
UpdateDomain	sagemaker	sagemaker:UpdateDomain			Write
UpdateDomain	sagemaker	iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
UpdateEndpoint	sagemaker	sagemaker:UpdateEndpoint			Write
UpdateEndpointWeightsAndCapacities	sagemaker	sagemaker:UpdateEndpointWeightsAndCapacities			Write
UpdateExperiment	sagemaker	sagemaker:UpdateExperiment			Write
UpdateFeatureGroup	sagemaker	sagemaker:UpdateFeatureGroup			Write
UpdateFeatureMetadata	sagemaker	sagemaker:UpdateFeatureMetadata			Write
UpdateHub	sagemaker	sagemaker:UpdateHub			Write
UpdateHubContent	sagemaker	sagemaker:UpdateHubContent			Write
UpdateHubContentReference	sagemaker	sagemaker:UpdateHubContentReference			Write
UpdateImage	sagemaker	sagemaker:UpdateImage			Write
UpdateImage	sagemaker	iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
UpdateImageVersion	sagemaker	sagemaker:UpdateImageVersion			Write
UpdateInferenceComponent	sagemaker	sagemaker:UpdateInferenceComponent			Write
UpdateInferenceComponentRuntimeConfig	sagemaker	sagemaker:UpdateInferenceComponentRuntimeConfig			Write
UpdateInferenceExperiment	sagemaker	sagemaker:UpdateInferenceExperiment			Write
UpdateMlflowApp	sagemaker	sagemaker:UpdateMlflowApp			Write
UpdateMlflowTrackingServer	sagemaker	sagemaker:UpdateMlflowTrackingServer			Write
UpdateModelCard	sagemaker	sagemaker:UpdateModelCard			Write
UpdateModelPackage	sagemaker	sagemaker:UpdateModelPackage			Write
UpdateMonitoringAlert	sagemaker	sagemaker:UpdateMonitoringAlert			Write
UpdateMonitoringSchedule	sagemaker	sagemaker:UpdateMonitoringSchedule			Write
UpdateMonitoringSchedule	sagemaker	iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
UpdateNotebookInstance	sagemaker	sagemaker:UpdateNotebookInstance			Write
UpdateNotebookInstance	sagemaker	iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
UpdateNotebookInstanceLifecycleConfig	sagemaker	sagemaker:UpdateNotebookInstanceLifecycleConfig			Write
UpdatePipeline	sagemaker	sagemaker:UpdatePipeline			Write
UpdatePipeline	sagemaker	iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
UpdatePipelineExecution	sagemaker	sagemaker:UpdatePipelineExecution			Write
UpdatePipelineVersion	sagemaker	sagemaker:UpdatePipelineVersion			Write
UpdateProject	sagemaker	sagemaker:AddTags			Tagging, Write
UpdateProject	sagemaker	sagemaker:UpdateProject			Write
UpdateSpace	sagemaker	sagemaker:UpdateSpace			Write
UpdateTrainingJob	sagemaker	sagemaker:UpdateTrainingJob			Write
UpdateTrial	sagemaker	sagemaker:UpdateTrial			Write
UpdateTrialComponent	sagemaker	sagemaker:UpdateTrialComponent			Write
UpdateUserProfile	sagemaker	sagemaker:UpdateUserProfile			Write
UpdateUserProfile	sagemaker	iam:PassRole	iam:PassedToService	sagemaker.amazonaws.com	Write
UpdateWorkforce	sagemaker	sagemaker:UpdateWorkforce			Write
UpdateWorkteam	sagemaker	sagemaker:UpdateWorkteam			Write
DeleteHumanLoop	sagemaker-a2i-runtime	sagemaker:DeleteHumanLoop			Write
DescribeHumanLoop	sagemaker-a2i-runtime	sagemaker:DescribeHumanLoop			Read
ListHumanLoops	sagemaker-a2i-runtime	sagemaker:ListHumanLoops			List
StartHumanLoop	sagemaker-a2i-runtime	sagemaker:StartHumanLoop			Write
StopHumanLoop	sagemaker-a2i-runtime	sagemaker:StopHumanLoop			Write
BatchGetRecord	sagemaker-featurestore-runtime	sagemaker:BatchGetRecord			Read
DeleteRecord	sagemaker-featurestore-runtime	sagemaker:DeleteRecord			Write
GetRecord	sagemaker-featurestore-runtime	sagemaker:GetRecord			Read
PutRecord	sagemaker-featurestore-runtime	sagemaker:PutRecord			Write
BatchGetMetrics	sagemaker-metrics	sagemaker:BatchGetMetrics			Read
BatchPutMetrics	sagemaker-metrics	sagemaker:BatchPutMetrics			Write
InvokeEndpoint	sagemaker-runtime	sagemaker:InvokeEndpoint			Read
InvokeEndpointAsync	sagemaker-runtime	sagemaker:InvokeEndpointAsync			Read
InvokeEndpointWithResponseStream	sagemaker-runtime	sagemaker:CallWithBearerToken			Read
InvokeEndpointWithResponseStream	sagemaker-runtime	sagemaker:InvokeEndpoint			Read
CompleteRollout	sagemakerjobruntime	sagemaker:CallWithBearerToken			Read
CompleteRollout	sagemakerjobruntime	sagemaker:CompleteRollout			Write
Sample	sagemakerjobruntime	sagemaker:CallWithBearerToken			Read
Sample	sagemakerjobruntime	sagemaker:Sample			Write
SampleWithResponseStream	sagemakerjobruntime	sagemaker:CallWithBearerToken			Read
SampleWithResponseStream	sagemakerjobruntime	sagemaker:SampleWithResponseStream			Write
UpdateReward	sagemakerjobruntime	sagemaker:CallWithBearerToken			Read
UpdateReward	sagemakerjobruntime	sagemaker:UpdateReward			Write

Actions defined by Amazon SageMaker

You can specify the following actions in the Action element of an IAM policy statement. Use policies to grant permissions to perform an operation in Amazon. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AddAssociation	Grants permission to associate a lineage entity (artifact, context, action, experiment, experiment-trial-component) to each other	action*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
		artifact*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		context*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
AddTags	Grants permission to add or overwrite one or more tags for the specified Amazon SageMaker resource	action	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction	Tagging, Write
		ai-benchmark-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		ai-recommendation-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		ai-workload-config	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		algorithm	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		app	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		app-image-config	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		artifact	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		automl-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		cluster	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		cluster-scheduler-config	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		code-repository	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		compilation-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		compute-quota	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		context	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		data-quality-job-definition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		device	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		device-fleet	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		domain	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		edge-deployment-plan	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		edge-packaging-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		endpoint	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		endpoint-config	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		experiment	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		experiment-trial	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		experiment-trial-component	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		feature-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		flow-definition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		hub	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		hub-content	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		human-task-ui	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		hyper-parameter-tuning-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		image	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		inference-component	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		inference-recommendations-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		labeling-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		mlflow-app	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		mlflow-tracking-server	aws:RequestTag/${TagKey} aws:TagKeys sagemaker:TaggingAction
		model	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		model-bias-job-definition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		model-card	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		model-explainability-job-definition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		model-package	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		model-package-group	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		model-quality-job-definition	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		monitoring-schedule	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		notebook-instance	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		notebook-instance-lifecycle-config	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		optimization-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		partner-app	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		pipeline	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		processing-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		project	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		reserved-capacity	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		space	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		studio-lifecycle-config	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		training-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		training-plan	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		transform-job	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		user-profile	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
		workteam	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:TaggingAction
AssociateTrialComponent	Grants permission to associate a trial component with a trial	experiment-trial*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
AssociateTrialComponent		experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
AttachClusterNodeVolume	Grants permission to attach an Amazon EBS volume to a SageMaker HyperPod cluster node	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
BatchAddClusterNodes	Grants permission to add multiple nodes at a time to a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
BatchDeleteClusterNodes	Grants permission to batch delete SageMaker HyperPod cluster nodes	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
BatchDescribeModelPackage	Grants permission to describe one or more ModelPackages	model-package*	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}	Read
BatchGetMetrics	Grants permission to retrieve metrics associated with SageMaker Resources such as Training Jobs or Trial Components	experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
BatchGetMetrics		training-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
BatchGetRecord	Grants permission to get a batch of records from one or more feature groups	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
BatchPutMetrics	Grants permission to publish metrics associated with a SageMaker Resource such as a Training Job or Trial Component	experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
BatchPutMetrics		training-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
BatchWriteRecord	Grants permission to put a batch of records to one or more feature groups	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CallMlflowAppApi	Grants permission to invoke MLflow APIs	mlflow-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CallPartnerAppApi	Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases	partner-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CompleteRollout	Grants permission to mark a rollout as complete for a job	job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreateAIBenchmarkJob	Grants permission to create an AI benchmark job	ai-benchmark-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateAIRecommendationJob	Grants permission to create an AI recommendation job	ai-recommendation-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateAIWorkloadConfig	Grants permission to create an AI workload configuration	ai-workload-config*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateAction	Grants permission to create an action	action*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateAlgorithm	Grants permission to create an algorithm	algorithm*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateApp	Grants permission to create an App for a SageMaker UserProfile or Space	app*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ImageArns sagemaker:ImageVersionArns sagemaker:InstanceTypes sagemaker:OwnerUserProfileArn sagemaker:ResourceTag/${TagKey} sagemaker:SpaceSharingType sagemaker:StudioLifecycleConfigArns	Write
CreateAppImageConfig	Grants permission to create an AppImageConfig	app-image-config*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateArtifact	Grants permission to create an artifact	artifact*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateAutoMLJob	Grants permission to create an AutoML job	automl-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InterContainerTrafficEncryption sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateAutoMLJobV2	Grants permission to create a V2 AutoML job	automl-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InterContainerTrafficEncryption sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateCluster	Grants permission to create a SageMaker HyperPod cluster	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
		reserved-capacity	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets
		training-plan	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets
CreateClusterSchedulerConfig	Grants permission to create a cluster scheduler config	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateClusterSchedulerConfig	Grants permission to create a cluster scheduler config	cluster-scheduler-config*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateCodeRepository	Grants permission to create a CodeRepository	code-repository*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateCompilationJob	Grants permission to create a compilation job	compilation-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateComputeQuota	Grants permission to create a compute quota	cluster*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateComputeQuota	Grants permission to create a compute quota	compute-quota*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateContext	Grants permission to create a context	context*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateDataQualityJobDefinition	Grants permission to create a data quality job definition	data-quality-job-definition*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateDeviceFleet	Grants permission to create a device fleet	device-fleet*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateDomain	Grants permission to create a Domain for SageMaker Studio	domain*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:AppNetworkAccessType sagemaker:DomainSharingOutputKmsKeyArn sagemaker:ImageArns sagemaker:ImageVersionArns sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:StudioLifecycleConfigArns sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateEdgeDeploymentPlan	Grants permission to create an edge deployment plan	edge-deployment-plan*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateEdgeDeploymentStage	Grants permission to create an edge deployment stage	edge-deployment-plan*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateEdgePackagingJob	Grants permission to create an edge packaging job	edge-packaging-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateEndpoint	Grants permission to create an endpoint using the endpoint configuration specified in the request	endpoint*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateEndpoint		endpoint-config*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateEndpointConfig	Grants permission to create an endpoint configuration that can be deployed using Amazon SageMaker hosting services	endpoint-config*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:AcceleratorTypes sagemaker:InstanceTypes sagemaker:ModelArn sagemaker:NetworkIsolation sagemaker:ResourceTag/${TagKey} sagemaker:ServerlessMaxConcurrency sagemaker:ServerlessMemorySize sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateExperiment	Grants permission to create an experiment	experiment*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateFeatureGroup	Grants permission to create a feature group	feature-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:FeatureGroupDisableGlueTableCreation sagemaker:FeatureGroupEnableOnlineStore sagemaker:FeatureGroupOfflineStoreConfig sagemaker:FeatureGroupOfflineStoreKmsKeyArn sagemaker:FeatureGroupOfflineStoreS3Uri sagemaker:FeatureGroupOnlineStoreKmsKeyArn sagemaker:ResourceTag/${TagKey}	Write
CreateFlowDefinition	Grants permission to create a flow definition, which defines settings for a human workflow	flow-definition*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey} sagemaker:WorkteamArn sagemaker:WorkteamType	Write
CreateHub	Grants permission to create a hub	hub*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateHubContentPresignedUrls	Grants permission to generate S3 presigned URLs with GetObject permission for accessing model artifacts	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
CreateHubContentPresignedUrls		hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
CreateHubContentReference	Grants permission to create hub content reference	hub*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateHubContentReference	Grants permission to create hub content reference	hub-content*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateHumanTaskUi	Grants permission to define the settings you will use for the human review workflow user interface	human-task-ui*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateHyperParameterTuningJob	Grants permission to create a hyper parameter tuning job that can be deployed using Amazon SageMaker	hyper-parameter-tuning-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:FileSystemAccessMode sagemaker:FileSystemDirectoryPath sagemaker:FileSystemId sagemaker:FileSystemType sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateImage	Grants permission to create a SageMaker Image	image*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateImageVersion	Grants permission to create a SageMaker ImageVersion	image*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreateInferenceComponent	Grants permission to create an inference component on an endpoint	endpoint*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ModelArn sagemaker:ResourceTag/${TagKey}	Write
CreateInferenceComponent		inference-component*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ModelArn sagemaker:ResourceTag/${TagKey}	Write
CreateInferenceExperiment	Grants permission to create an inference experiment	inference-experiment*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateInferenceRecommendationsJob	Grants permission to create an inference recommendations job	inference-recommendations-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateJob	Grants permission to create a SageMaker model customization job	job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateLabelingJob	Grants permission to start a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models	labeling-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:WorkteamArn sagemaker:WorkteamType	Write
CreateLineageGroupPolicy	Grants permission to create a lineage group policy			Write
CreateMlflowApp	Grants permission to create an MLflow app	mlflow-app*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateMlflowTrackingServer	Grants permission to create an MLflow tracking server	mlflow-tracking-server*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateModel	Grants permission to create a model in Amazon SageMaker. In the request, you specify a name for the model and describe one or more containers	model*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:DirectGatedModelAccess sagemaker:NetworkIsolation sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateModelBiasJobDefinition	Grants permission to create a model bias job definition	model-bias-job-definition*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateModelCard	Grants permission to create a model card	model-card*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateModelCardExportJob	Grants permission to create an export job for a model card	model-card*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreateModelExplainabilityJobDefinition	Grants permission to create a model explainability job definition	model-explainability-job-definition*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateModelPackage	Grants permission to create a ModelPackage	model-package	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:CustomerMetadataProperties/${MetadataKey} sagemaker:ModelApprovalStatus sagemaker:ModelLifeCycle:Stage sagemaker:ModelLifeCycle:StageStatus sagemaker:ResourceTag/${TagKey}	Write
CreateModelPackageGroup	Grants permission to create a ModelPackageGroup	model-package-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateModelQualityJobDefinition	Grants permission to create a model quality job definition	model-quality-job-definition*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateMonitoringSchedule	Grants permission to create a monitoring schedule	monitoring-schedule*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateNotebookInstance	Grants permission to create an Amazon SageMaker notebook instance. A notebook instance is an Amazon EC2 instance running on a Jupyter Notebook	notebook-instance*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:AcceleratorTypes sagemaker:DirectInternetAccess sagemaker:InstanceTypes sagemaker:MinimumInstanceMetadataServiceVersion sagemaker:NotebookInstanceLifecycleConfigArns sagemaker:ResourceTag/${TagKey} sagemaker:RootAccess sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateNotebookInstanceLifecycleConfig	Grants permission to create a notebook instance lifecycle configuration that can be deployed using Amazon SageMaker	notebook-instance-lifecycle-config*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateOptimizationJob	Grants permission to create an optimization job	optimization-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreatePartnerApp	Grants permission to create an Amazon SageMaker Partner AI App	partner-app*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreatePartnerAppPresignedUrl	Grants permission to return a URL that you can use from your browser to connect to the Amazon SageMaker Partner AI App	partner-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreatePipeline	Grants permission to create a pipeline	pipeline*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreatePresignedDomainUrl	Grants permission to return a URL that you can use from your browser to connect to the Domain as a specified UserProfile when AuthMode is 'IAM'	user-profile*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreatePresignedMlflowAppUrl	Grants permission to return a URL that you can use from your browser to connect to the MLflow app	mlflow-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreatePresignedMlflowTrackingServerUrl	Grants permission to return a URL that you can use from your browser to connect to the MLflow tracking server	mlflow-tracking-server*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreatePresignedNotebookInstanceUrl	Grants permission to create a URL that you can use from your browser to connect to the Notebook Instance	notebook-instance*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
CreateProcessingJob	Grants permission to start a processing job. After processing completes, Amazon SageMaker saves the resulting artifacts and other optional output to an Amazon S3 location that you specify	processing-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
CreateProject	Grants permission to create a Project	project*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateSpace	Grants permission to create a Space for a SageMaker Domain	space*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ImageArns sagemaker:ImageVersionArns sagemaker:InstanceTypes sagemaker:OwnerUserProfileArn sagemaker:RemoteAccess sagemaker:ResourceTag/${TagKey} sagemaker:SpaceSharingType sagemaker:StudioLifecycleConfigArns	Write
CreateStudioLifecycleConfig	Grants permission to create a Studio Lifecycle Configuration that can be deployed using Amazon SageMaker	studio-lifecycle-config*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateTrainingJob	Grants permission to start a model training job. After training completes, Amazon SageMaker saves the resulting model artifacts and other optional output to an Amazon S3 location that you specify	reserved-capacity	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:DirectGatedModelAccess sagemaker:EnableRemoteDebug sagemaker:FileSystemAccessMode sagemaker:FileSystemDirectoryPath sagemaker:FileSystemId sagemaker:FileSystemType sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:KeepAlivePeriod sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
		training-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:DirectGatedModelAccess sagemaker:EnableRemoteDebug sagemaker:FileSystemAccessMode sagemaker:FileSystemDirectoryPath sagemaker:FileSystemId sagemaker:FileSystemType sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:KeepAlivePeriod sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets
		training-plan	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:DirectGatedModelAccess sagemaker:EnableRemoteDebug sagemaker:FileSystemAccessMode sagemaker:FileSystemDirectoryPath sagemaker:FileSystemId sagemaker:FileSystemType sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:KeepAlivePeriod sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets
CreateTrainingPlan	Grants permission to create a training plan that allocates resources for scheduling workloads within a specified time range	training-plan*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateTransformJob	Grants permission to start a transform job. After the results are obtained, Amazon SageMaker saves them to an Amazon S3 location that you specify	transform-job*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:ModelArn sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn	Write
CreateTrial	Grants permission to create a trial	experiment*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateTrial	Grants permission to create a trial	experiment-trial*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateTrialComponent	Grants permission to create a trial component	experiment-trial-component*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateUserProfile	Grants permission to create a UserProfile for a SageMaker Domain	user-profile*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:DomainSharingOutputKmsKeyArn sagemaker:ImageArns sagemaker:ImageVersionArns sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:StudioLifecycleConfigArns sagemaker:VpcSecurityGroupIds	Write
CreateWorkforce	Grants permission to create a workforce	workforce*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateWorkteam	Grants permission to create a workteam	workteam*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
DeleteAIBenchmarkJob	Grants permission to delete an AI benchmark job	ai-benchmark-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteAIRecommendationJob	Grants permission to delete an AI recommendation job	ai-recommendation-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteAIWorkloadConfig	Grants permission to delete an AI workload configuration	ai-workload-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteAction	Grants permission to delete an action	action*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteAlgorithm	Grants permission to delete an algorithm	algorithm*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteApp	Grants permission to delete an App	app*	aws:ResourceTag/${TagKey} sagemaker:OwnerUserProfileArn sagemaker:ResourceTag/${TagKey} sagemaker:SpaceSharingType	Write
DeleteAppImageConfig	Grants permission to delete an AppImageConfig	app-image-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteArtifact	Grants permission to delete an artifact	artifact*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteAssociation	Grants permission to delete the association from a lineage entity (artifact, context, action, experiment, experiment-trial-component) to another	action*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
		artifact*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		context*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
DeleteCluster	Grants permission to delete a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteClusterSchedulerConfig	Grants permission to delete a cluster scheduler config	cluster-scheduler-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteCodeRepository	Grants permission to delete a CodeRepository	code-repository*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteCompilationJob	Grants permission to delete a compilation job	compilation-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteComputeQuota	Grants permission to delete a compute quota	compute-quota*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteContext	Grants permission to delete a context	context*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteDataQualityJobDefinition	Grants permission to delete the data quality job definition created using the CreateDataQualityJobDefinition API	data-quality-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteDeviceFleet	Grants permission to delete a device fleet	device-fleet*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteDomain	Grants permission to delete a Domain	domain*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteEdgeDeploymentPlan	Grants permission to delete an edge deployment plan	edge-deployment-plan*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteEdgeDeploymentStage	Grants permission to delete an edge deployment stage	edge-deployment-plan*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteEndpoint	Grants permission to delete an endpoint. Amazon SageMaker frees up all the resources that were deployed when the endpoint was created	endpoint*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteEndpointConfig	Grants permission to delete the endpoint configuration created using the CreateEndpointConfig API. The DeleteEndpointConfig API deletes only the specified configuration. It does not delete any endpoints created using the configuration	endpoint-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteExperiment	Grants permission to delete an experiment	experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteFeatureGroup	Grants permission to delete a feature group	feature-group*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteFlowDefinition	Grants permission to delete the specified flow definition	flow-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteHub	Grants permission to delete hubs	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteHubContent	Grants permission to delete hub content	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteHubContent	Grants permission to delete hub content	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteHubContentReference	Grants permission to delete hub content reference	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteHubContentReference	Grants permission to delete hub content reference	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteHumanLoop	Grants permission to delete a specified human loop	human-loop*		Write
DeleteHumanTaskUi	Grants permission to delete the specified human task user interface (worker task template)	human-task-ui*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteHyperParameterTuningJob	Grants permission to delete a hyper parameter tuning job	hyper-parameter-tuning-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteImage	Grants permission to delete a SageMaker Image	image*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteImageVersion	Grants permission to delete a SageMaker ImageVersion	image-version*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteInferenceComponent	Grants permission to delete an inference component. Amazon SageMaker frees up the resources that were reserved when the inference component was created	inference-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteInferenceExperiment	Grants permission to delete an inference experiment	inference-experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteJob	Grants permission to delete a SageMaker model customization job	job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteLineageGroupPolicy	Grants permission to delete a lineage group policy			Write
DeleteMlflowApp	Grants permission to delete an MLflow app	mlflow-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteMlflowTrackingServer	Grants permission to delete an MLflow tracking server	mlflow-tracking-server*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteModel	Grants permission to delete a model created using the CreateModel API. The DeleteModel API deletes only the model entry in Amazon SageMaker that you created by calling the CreateModel API. It does not delete model artifacts, inference code, or the IAM role that you specified when creating the model	model*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteModelBiasJobDefinition	Grants permission to delete the model bias job definition created using the CreateModelBiasJobDefinition API	model-bias-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteModelCard	Grants permission to delete a model card	model-card*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteModelExplainabilityJobDefinition	Grants permission to delete the model explainability job definition created using the CreateModelExplainabilityJobDefinition API	model-explainability-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteModelPackage	Grants permission to delete a ModelPackage	model-package*	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}	Write
DeleteModelPackageGroup	Grants permission to delete a ModelPackageGroup	model-package-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteModelPackageGroupPolicy	Grants permission to delete a ModelPackageGroup policy	model-package-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteModelQualityJobDefinition	Grants permission to delete the model quality job definition created using the CreateModelQualityJobDefinition API	model-quality-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteMonitoringSchedule	Grants permission to delete a monitoring schedule	monitoring-schedule*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteNotebookInstance	Grants permission to delete a Amazon SageMaker notebook instance. Before you can delete a notebook instance, you must call the StopNotebookInstance API	notebook-instance*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteNotebookInstanceLifecycleConfig	Grants permission to delete a notebook instance lifecycle configuration	notebook-instance-lifecycle-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteOptimizationJob	Grants permission to delete an optimization job	optimization-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeletePartnerApp	Grants permission to delete an Amazon SageMaker Partner AI App	partner-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeletePipeline	Grants permission to delete a pipeline	pipeline*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteProcessingJob	Grants permission to delete a processing job	processing-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteProject	Grants permission to delete a project	project*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteRecord	Grants permission to delete a record from a feature group	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteSpace	Grants permission to delete a Space	space*	aws:ResourceTag/${TagKey} sagemaker:OwnerUserProfileArn sagemaker:ResourceTag/${TagKey} sagemaker:SpaceSharingType	Write
DeleteStudioLifecycleConfig	Grants permission to delete a Studio Lifecycle Configuration	studio-lifecycle-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteTags	Grants permission to delete the specified set of tags from an Amazon SageMaker resource	action	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Tagging, Write
		ai-benchmark-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		ai-recommendation-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		ai-workload-config	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		algorithm	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		app	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		app-image-config	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		artifact	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		automl-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		cluster	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		cluster-scheduler-config	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		code-repository	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		compilation-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		compute-quota	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		context	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		data-quality-job-definition	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		device	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		device-fleet	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		domain	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		edge-deployment-plan	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		edge-packaging-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		endpoint	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		endpoint-config	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		experiment	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		experiment-trial	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		experiment-trial-component	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		feature-group	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		flow-definition	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		hub	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		hub-content	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		human-task-ui	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		hyper-parameter-tuning-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		image	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		inference-component	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		inference-recommendations-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		labeling-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		mlflow-app	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		mlflow-tracking-server	aws:TagKeys
		model	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		model-bias-job-definition	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		model-card	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		model-explainability-job-definition	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		model-package	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}
		model-package-group	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		model-quality-job-definition	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		monitoring-schedule	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		notebook-instance	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		notebook-instance-lifecycle-config	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		optimization-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		partner-app	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		pipeline	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		processing-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		project	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		reserved-capacity	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		space	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		studio-lifecycle-config	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		training-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		training-plan	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		transform-job	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		user-profile	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
		workteam	aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}
DeleteTrainingJob	Grants permission to delete a training job	training-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteTrial	Grants permission to delete a trial	experiment-trial*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteTrialComponent	Grants permission to delete a trial component	experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteUserProfile	Grants permission to delete a UserProfile	user-profile*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteWorkforce	Grants permission to delete a workforce	workforce*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeleteWorkteam	Grants permission to delete a workteam	workteam*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeployHubModel	Grants permission to deploy a model in hub to an endpoint	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeployHubModel	Grants permission to deploy a model in hub to an endpoint	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DeregisterDevices	Grants permission to deregister a set of devices	device*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DescribeAIBenchmarkJob	Grants permission to describe an AI benchmark job	ai-benchmark-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeAIRecommendationJob	Grants permission to describe an AI recommendation job	ai-recommendation-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeAIWorkloadConfig	Grants permission to describe an AI workload configuration	ai-workload-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeAction	Grants permission to get information about an action	action*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeAlgorithm	Grants permission to describe an algorithm	algorithm*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeApp	Grants permission to describe an App	app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeAppImageConfig	Grants permission to describe an AppImageConfig	app-image-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeArtifact	Grants permission to get information about an artifact	artifact*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeAutoMLJob	Grants permission to describe an AutoML job that was created via the CreateAutoMLJob API	automl-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeAutoMLJobV2	Grants permission to describe an AutoML job that was created via the CreateAutoMLJobV2 API	automl-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeCluster	Grants permission to return information about a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeClusterEvent	Grants permission to return information about an Event within a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeClusterNode	Grants permission to return information about a SageMaker HyperPod cluster node	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeClusterSchedulerConfig	Grants permission to get information about a cluster scheduler config	cluster-scheduler-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeCodeRepository	Grants permission to describe a CodeRepository	code-repository*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeCompilationJob	Grants permission to return information about a compilation job	compilation-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeComputeQuota	Grants permission to get information about a compute quota	compute-quota*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeContext	Grants permission to get information about a context	context*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeDataQualityJobDefinition	Grants permission to return information about a data quality job definition	data-quality-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeDevice	Grants permission to access information about a device	device*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeDeviceFleet	Grants permission to access information about a device fleet	device-fleet*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeDomain	Grants permission to describe a Domain	domain*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeEdgeDeploymentPlan	Grants permission to access information about an edge deployment plan	edge-deployment-plan*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeEdgePackagingJob	Grants permission to access information about an edge packaging job	edge-packaging-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeEndpoint	Grants permission to return the description of an endpoint	endpoint*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeEndpointConfig	Grants permission to return the description of an endpoint configuration, which was created using the CreateEndpointConfig API	endpoint-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeExperiment	Grants permission to return information about an experiment	experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeFeatureGroup	Grants permission to return information about a feature group	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeFeatureMetadata	Grants permission to return information about a feature metadata	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeFlowDefinition	Grants permission to return information about the specified flow definition	flow-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeHub	Grants permission to describe hubs	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeHubContent	Grants permission to describe hub content	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeHubContent	Grants permission to describe hub content	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeHumanLoop	Grants permission to return information about the specified human loop	human-loop*		Read
DescribeHumanTaskUi	Grants permission to return detailed information about the specified human review workflow user interface	human-task-ui*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeHyperParameterTuningJob	Grants permission to describe a hyper parameter tuning job that was created via the CreateHyperParameterTuningJob API	hyper-parameter-tuning-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeImage	Grants permission to return information about a SageMaker Image	image*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeImageVersion	Grants permission to return information about a SageMaker ImageVersion	image-version*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeInferenceComponent	Grants permission to return the description of an inference component	inference-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeInferenceExperiment	Grants permission to get information about an inference experiment	inference-experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeInferenceRecommendationsJob	Grants permission to get information about an inference recommendations job	inference-recommendations-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeJob	Grants permission to return information about a SageMaker model customization job	job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeJobSchemaVersion	Grants permission to return information about a job schema version for a particular JobCategory for the CreateJob API			Read
DescribeLabelingJob	Grants permission to return information about a labeling job	labeling-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeLineageGroup	Grants permission to describe a lineage group			Read
DescribeMlflowApp	Grants permission to get information about an MLflow app	mlflow-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeMlflowTrackingServer	Grants permission to get information about an MLflow tracking server	mlflow-tracking-server*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeModel	Grants permission to describe a model that you created using the CreateModel API	model*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeModelBiasJobDefinition	Grants permission to return information about a model bias job definition	model-bias-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeModelCard	Grants permission to get information about a model card	model-card*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeModelCardExportJob	Grants permission to get information about a model card export job	model-card-export-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeModelExplainabilityJobDefinition	Grants permission to return information about a model explainability job definition	model-explainability-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeModelPackage	Grants permission to describe a ModelPackage	model-package*	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}	Read
DescribeModelPackageGroup	Grants permission to describe a ModelPackageGroup	model-package-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeModelQualityJobDefinition	Grants permission to return information about a model quality job definition	model-quality-job-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeMonitoringSchedule	Grants permission to return information about a monitoring schedule	monitoring-schedule*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeNotebookInstance	Grants permission to return information about a notebook instance	notebook-instance*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeNotebookInstanceLifecycleConfig	Grants permission to describe a notebook instance lifecycle configuration that was created via the CreateNotebookInstanceLifecycleConfig API	notebook-instance-lifecycle-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeOptimizationJob	Grants permission to return information about an optimization job	optimization-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribePartnerApp	Grants permission to describe an Amazon SageMaker Partner AI App	partner-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribePipeline	Grants permission to get information about a pipeline	pipeline*	aws:ResourceTag/${TagKey} sagemaker:PipelineVersionId sagemaker:ResourceTag/${TagKey}	Read
DescribePipelineDefinitionForExecution	Grants permission to get the pipeline definition for a pipeline execution	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribePipelineExecution	Grants permission to get information about a pipeline execution	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeProcessingJob	Grants permission to return information about a processing job	processing-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeProject	Grants permission to describe a project	project*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeReservedCapacity	Grants permission to return information about a specified Reserved Capacity	reserved-capacity*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeSpace	Grants permission to describe a Space	space*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeStudioLifecycleConfig	Grants permission to describe a Studio Lifecycle Configuration	studio-lifecycle-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeSubscribedWorkteam	Grants permission to return information about a subscribed workteam	workteam*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeTrainingJob	Grants permission to return information about a training job	training-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeTrainingPlan	Grants permission to return information about a specified training plan	training-plan*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeTransformJob	Grants permission to return information about a transform job	transform-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeTrial	Grants permission to return information about a trial	experiment-trial*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeTrialComponent	Grants permission to return information about a trial component	experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeUserProfile	Grants permission to describe a UserProfile	user-profile*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeWorkforce	Grants permission to return information about a workforce	workforce*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeWorkteam	Grants permission to return information about a workteam	workteam*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DetachClusterNodeVolume	Grants permission to detach an Amazon EBS volume from a SageMaker HyperPod cluster node	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
DisableSagemakerServicecatalogPortfolio	Grants permission to disable a SageMaker Service Catalog Portfolio			Write
DisassociateTrialComponent	Grants permission to disassociate a trial component from a trial	experiment-trial*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
		experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		processing-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
EnableSagemakerServicecatalogPortfolio	Grants permission to enable a SageMaker Service Catalog Portfolio			Write
GetDeployments	Grants permission to get deployment plan for device	device*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
GetDeviceFleetReport	Grants permission to access a summary of the devices in a device fleet	device-fleet*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
GetDeviceRegistration	Grants permission to get device registration. After you deploy a model onto edge devices this api is used to get current device registration	device*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
GetLineageGroupPolicy	Grants permission to retreive a lineage group policy			Read
GetModelPackageGroupPolicy	Grants permission to get a ModelPackageGroup policy	model-package-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
GetRecord	Grants permission to get a record from a feature group	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
GetSagemakerServicecatalogPortfolioStatus	Grants permission to get a SageMaker Service Catalog Portfolio			Read
GetScalingConfigurationRecommendation	Grants permission to get a scaling policy configuration recommendation	inference-recommendations-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
GetSearchSuggestions	Grants permission to get search suggestions when provided with a keyword			Read
ImportHubContent	Grants permission to import hub content	hub*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
ImportHubContent	Grants permission to import hub content	hub-content*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
InvokeEndpoint	Grants permission to invoke an endpoint. After you deploy a model into production using Amazon SageMaker hosting services, your client applications use this API to get inferences from the model hosted at the specified endpoint	endpoint*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey} sagemaker:TargetModel	Read
InvokeEndpoint		inference-component	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey} sagemaker:TargetModel	Read
InvokeEndpointAsync	Grants permission to get inferences from the hosted model at the specified endpoint in an asynchronous manner	endpoint*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
InvokeEndpointWithResponseStream	Grants permission to get the inference response as a stream from the specified endpoint	endpoint*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
InvokeEndpointWithResponseStream		inference-component	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
ListAIBenchmarkJobs	Grants permission to list AI benchmark jobs			List
ListAIRecommendationJobs	Grants permission to list AI recommendation jobs			List
ListAIWorkloadConfigs	Grants permission to list AI workload configurations			List
ListActions	Grants permission to list actions			List
ListAlgorithms	Grants permission to list Algorithms			List
ListAliases	Grants permission to list Aliases that belong to a SageMaker Image or Sagemaker ImageVersion	image*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListAliases		image-version*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListAppImageConfigs	Grants permission to list the AppImageConfigs in your account			List
ListApps	Grants permission to list the Apps in your account			List
ListArtifacts	Grants permission to list artifacts			List
ListAssociations	Grants permission to list associations			List
ListAutoMLJobs	Grants permission to list AutoML jobs			List
ListCandidatesForAutoMLJob	Grants permission to lists candidates for an AutoML job			List
ListClusterEvents	Grants permission to list events within a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListClusterNodes	Grants permission to list nodes within a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListClusterSchedulerConfigs	Grants permission to list cluster scheduler configs			List
ListClusters	Grants permission to list SageMaker HyperPod clusters			List
ListCodeRepositories	Grants permission to list code repositories			List
ListCompilationJobs	Grants permission to list compilation jobs			List
ListComputeQuotas	Grants permission to list compute quotas			List
ListContexts	Grants permission to list contexts			List
ListDataQualityJobDefinitions	Grants permission to list data quality job definitions			List
ListDeviceFleets	Grants permission to list device fleets			List
ListDevices	Grants permission to list devices			List
ListDomains	Grants permission to list the Domains in your account			List
ListEdgeDeploymentPlans	Grants permission to list edge deployment plans			List
ListEdgePackagingJobs	Grants permission to list edge packaging jobs			List
ListEndpointConfigs	Grants permission to list endpoint configurations			List
ListEndpoints	Grants permission to list endpoints			List
ListExperiments	Grants permission to list experiments			List
ListFeatureGroups	Grants permission to list feature groups			List
ListFlowDefinitions	Grants permission to return summary information about flow definitions, given the specified parameters			List
ListHubContentVersions	Grants permission to list all versions of hub content	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListHubContentVersions	Grants permission to list all versions of hub content	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListHubContents	Grants permission to list newest versions of hub content	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListHubs	Grants permission to list hubs			List
ListHumanLoops	Grants permission to return summary information about human loops, given the specified parameters			List
ListHumanTaskUis	Grants permission to return summary information about human review workflow user interfaces, given the specified parameters			List
ListHyperParameterTuningJobs	Grants permission to list hyper parameter tuning jobs			List
ListImageVersions	Grants permission to list ImageVersions that belong to a SageMaker Image	image*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListImages	Grants permission to list SageMaker Images in your account			List
ListInferenceComponents	Grants permission to list inference components			List
ListInferenceExperiments	Grants permission to list inference experiments			List
ListInferenceRecommendationsJobSteps	Grants permission to list inference recommendations job steps			List
ListInferenceRecommendationsJobs	Grants permission to list inference recommendations jobs			List
ListJobSchemaVersions	Grants permission to list job schema versions for a particular JobCategory for the CreateJob API			List
ListJobs	Grants permission to list SageMaker model customization jobs			List
ListLabelingJobs	Grants permission to list labeling jobs			List
ListLabelingJobsForWorkteam	Grants permission to list labeling jobs for workteam	workteam*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListLineageGroups	Grants permission to list lineage groups			List
ListMlflowApps	Grants permission to list SageMaker MLflow Apps in your account			List
ListMlflowTrackingServers	Grants permission to list MLflow tracking servers			List
ListModelBiasJobDefinitions	Grants permission to list model bias job definitions			List
ListModelCardExportJobs	Grants permission to list export jobs for a model card	model-card*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListModelCardVersions	Grants permission to list versions of a model card	model-card*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListModelCards	Grants permission to list model cards			List
ListModelExplainabilityJobDefinitions	Grants permission to list model explainability job definitions			List
ListModelMetadata	Grants permission to list model metadata for inference recommendations jobs			List
ListModelPackageGroups	Grants permission to list ModelPackageGroups			List
ListModelPackages	Grants permission to list ModelPackages	model-package	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}	List
ListModelQualityJobDefinitions	Grants permission to list model quality job definitions			List
ListModels	Grants permission to list the models created with the CreateModel API			List
ListMonitoringAlertHistory	Grants permission to list the history of a monitoring alert			List
ListMonitoringAlerts	Grants permission to list monitoring alerts			List
ListMonitoringExecutions	Grants permission to list monitoring executions			List
ListMonitoringSchedules	Grants permission to list monitoring schedules			List
ListNotebookInstanceLifecycleConfigs	Grants permission to list the notebook instance lifecycle configurations that can be deployed using Amazon SageMaker			List
ListNotebookInstances	Grants permission to list the Amazon SageMaker notebook instances in the requester's account in an Amazon Web Services Region			List
ListOptimizationJobs	Grants permission to list optimization jobs			List
ListPartnerApps	Grants permission to list the Amazon SageMaker Partner AI Apps in your account			List
ListPipelineExecutionSteps	Grants permission to list steps for a pipeline execution	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListPipelineExecutions	Grants permission to list executions for a pipeline	pipeline*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListPipelineParametersForExecution	Grants permission to list parameters for a pipeline execution	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListPipelineVersions	Grants permission to list versions of a pipeline	pipeline*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListPipelines	Grants permission to list pipelines			List
ListProcessingJobs	Grants permission to list processing jobs			List
ListProjects	Grants permission to list Projects			List
ListRecords	Grants permission to list record identifiers from a feature group	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListResourceCatalogs	Grants permission to list resource catalogs			List
ListSpaces	Grants permission to list the Spaces in your account			List
ListStageDevices	Grants permission to list stage devices			List
ListStudioLifecycleConfigs	Grants permission to list the Studio Lifecycle Configurations that can be deployed using Amazon SageMaker			List
ListSubscribedWorkteams	Grants permission to list subscribed workteams			List
ListTags	Grants permission to list the tag set associated with the specified resource	action	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
		ai-benchmark-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		ai-recommendation-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		ai-workload-config	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		algorithm	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		app	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		app-image-config	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		artifact	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		automl-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		cluster	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		cluster-scheduler-config	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		code-repository	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		compilation-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		compute-quota	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		context	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		data-quality-job-definition	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		device	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		device-fleet	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		domain	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		edge-deployment-plan	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		edge-packaging-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		endpoint	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		endpoint-config	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		experiment	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		experiment-trial	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		experiment-trial-component	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		feature-group	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		flow-definition	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		hub	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		hub-content	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		human-task-ui	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		hyper-parameter-tuning-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		image	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		inference-component	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		inference-recommendations-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		labeling-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		mlflow-app	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		mlflow-tracking-server
		model	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		model-bias-job-definition	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		model-card	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		model-explainability-job-definition	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		model-package	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}
		model-package-group	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		model-quality-job-definition	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		monitoring-schedule	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		notebook-instance	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		notebook-instance-lifecycle-config	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		optimization-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		partner-app	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		pipeline	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		pipeline-execution	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		processing-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		project	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		reserved-capacity	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		space	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		studio-lifecycle-config	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		training-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		training-plan	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		transform-job	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		user-profile	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
		workteam	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
ListTrainingJobs	Grants permission to list training jobs			List
ListTrainingJobsForHyperParameterTuningJob	Grants permission to list training jobs for a hyper parameter tuning job	hyper-parameter-tuning-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListTrainingPlans	Grants permission to list all the training plans that have been created in a specified account			List
ListTransformJobs	Grants permission to list transform jobs			List
ListTrialComponents	Grants permission to list trial components			List
ListTrials	Grants permission to list trials			List
ListUltraServersByReservedCapacity	Grants permission to list all UltraServers in a specified Reserved Capacity	reserved-capacity*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	List
ListUserProfiles	Grants permission to list the UserProfiles in your account			List
ListWorkforces	Grants permission to list workforces			List
ListWorkteams	Grants permission to list workteams			List
PutLineageGroupPolicy	Grants permission to put a lineage group policy			Write
PutModelPackageGroupPolicy	Grants permission to put a ModelPackageGroup policy	model-package-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
PutRecord	Grants permission to put a record to a feature group	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
QueryLineage	Grants permission to explore the lineage graph			List
RegisterDevices	Grants permission to register a set of devices	device*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
RenderUiTemplate	Grants permission to render a UI template used for a human annotation task			Read
RetryPipelineExecution	Grants permission to retry a pipeline execution	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
Sample	Grants permission to invoke a sample request against a job	job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
SampleWithResponseStream	Grants permission to invoke a streaming sample request against a job	job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
Search	Grants permission to search for SageMaker objects		sagemaker:SearchVisibilityCondition/${FilterKey}	Read
SearchTrainingPlanOfferings	Grants permissions to search for the available training plan offerings that best match specified capacity requirements			Read
SendHeartbeat	Grants permission to publish heartbeat data from devices. After you deploy a model onto edge devices this api is used to report device status	device*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
SendPipelineExecutionStepFailure	Grants permission to fail a pending callback step	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
SendPipelineExecutionStepSuccess	Grants permission to succeed a pending callback step	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartClusterHealthCheck	Grants permission to start deep health checks for a SageMaker Hyperpod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartEdgeDeploymentStage	Grants permission to start an edge deployment stage	edge-deployment-plan*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartHumanLoop	Grants permission to start a human loop	flow-definition*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartInferenceExperiment	Grants permission to start an inference experiment	inference-experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartMlflowTrackingServer	Grants permission to start an MLfLow tracking server	mlflow-tracking-server*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartMonitoringSchedule	Grants permission to start a monitoring schedule	monitoring-schedule*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartNotebookInstance	Grants permission to start a notebook instance. This launches an EC2 instance with the latest version of the libraries and attaches your EBS volume	notebook-instance*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StartPipelineExecution	Grants permission to start a pipeline execution	pipeline*	aws:ResourceTag/${TagKey} sagemaker:PipelineVersionId sagemaker:ResourceTag/${TagKey}	Write
StartSession	Grants permission to start a remote session for a SageMaker space	space*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopAIBenchmarkJob	Grants permission to stop an AI benchmark job	ai-benchmark-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopAIRecommendationJob	Grants permission to stop an AI recommendation job	ai-recommendation-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopAutoMLJob	Grants permission to stop a running AutoML job	automl-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopCompilationJob	Grants permission to stop a compilation job	compilation-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopEdgeDeploymentStage	Grants permission to stop an edge deployment stage	edge-deployment-plan*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopEdgePackagingJob	Grants permission to stop an edge packaging job	edge-packaging-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopHumanLoop	Grants permission to stop a specified human loop	human-loop*		Write
StopHyperParameterTuningJob	Grants permission to stop a running hyper parameter tuning job create via the CreateHyperParameterTuningJob	hyper-parameter-tuning-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopInferenceExperiment	Grants permission to stop an inference experiment	inference-experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopInferenceRecommendationsJob	Grants permission to stop an inference recommendations job	inference-recommendations-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopJob	Grants permission to stop a SageMaker model customization job	job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopLabelingJob	Grants permission to stop a labeling job. Any labels already generated will be exported before stopping	labeling-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopMlflowTrackingServer	Grants permission to stop an MLflow tracking server	mlflow-tracking-server*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopMonitoringSchedule	Grants permission to stop a monitoring schedule	monitoring-schedule*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopNotebookInstance	Grants permission to stop a notebook instance. This terminates the EC2 instance. Before terminating the instance, Amazon SageMaker disconnects the EBS volume from it. Amazon SageMaker preserves the EBS volume	notebook-instance*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopOptimizationJob	Grants permission to stop an optimization job	optimization-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopPipelineExecution	Grants permission to stop a pipeline execution	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopProcessingJob	Grants permission to stop a processing job. To stop a job, Amazon SageMaker sends the algorithm the SIGTERM signal, which delays job termination for 120 seconds	processing-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopTrainingJob	Grants permission to stop a training job. To stop a job, Amazon SageMaker sends the algorithm the SIGTERM signal, which delays job termination for 120 seconds	training-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
StopTransformJob	Grants permission to stop a transform job. When Amazon SageMaker receives a StopTransformJob request, the status of the job changes to Stopping. After Amazon SageMaker stops the job, the status is set to Stopped	transform-job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
TrainHubModel	Grants permission to train a model in hub	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
TrainHubModel	Grants permission to train a model in hub	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateAction	Grants permission to update an action	action*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateAppImageConfig	Grants permission to update an AppImageConfig	app-image-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateArtifact	Grants permission to update an artifact	artifact*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateCluster	Grants permission to update a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
		reserved-capacity	aws:ResourceTag/${TagKey} sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets
		training-plan	aws:ResourceTag/${TagKey} sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets
UpdateClusterSchedulerConfig	Grants permission to update a cluster scheduler config	cluster-scheduler-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateClusterSoftware	Grants permission to update platform software for a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateCodeRepository	Grants permission to update a CodeRepository	code-repository*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateComputeQuota	Grants permission to update a compute quota	compute-quota*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateContext	Grants permission to update a context	context*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateDeviceFleet	Grants permission to update a device fleet	device-fleet*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateDevices	Grants permission to update a set of devices	device*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateDomain	Grants permission to update a Domain	domain*	aws:ResourceTag/${TagKey} sagemaker:AppNetworkAccessType sagemaker:DomainSharingOutputKmsKeyArn sagemaker:ImageArns sagemaker:ImageVersionArns sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:StudioLifecycleConfigArns sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
UpdateEndpoint	Grants permission to update an endpoint to use the endpoint configuration specified in the request	endpoint*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateEndpoint		endpoint-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateEndpointWeightsAndCapacities	Grants permission to update variant weight, capacity, or both of one or more variants associated with an endpoint	endpoint*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateExperiment	Grants permission to update an experiment	experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateFeatureGroup	Grants permission to update a feature group	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateFeatureMetadata	Grants permission to update a feature metadata	feature-group*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateHub	Grants permission to update hubs	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateHubContent	Grants permission to update hub content	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateHubContent	Grants permission to update hub content	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateHubContentReference	Grants permission to update hub content reference	hub*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateHubContentReference	Grants permission to update hub content reference	hub-content*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateImage	Grants permission to update the properties of a SageMaker Image	image*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateImageVersion	Grants permission to update the properties of a SageMaker ImageVersion	image-version*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateInferenceComponent	Grants permission to update an inference component to use the specification and configurations specified in the request	inference-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateInferenceComponentRuntimeConfig	Grants permission to update the runtime config of a given inference component	inference-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateInferenceExperiment	Grants permission to update an inference experiment	inference-experiment*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateMlflowApp	Grants permission to update an MLflow app	mlflow-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateMlflowTrackingServer	Grants permission to update an MLflow tracking server	mlflow-tracking-server*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateModelCard	Grants permission to update a model card	model-card*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateModelPackage	Grants permission to update a ModelPackage	model-package*	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:CustomerMetadataProperties/${MetadataKey} sagemaker:CustomerMetadataPropertiesToRemove sagemaker:ModelApprovalStatus sagemaker:ModelLifeCycle:Stage sagemaker:ModelLifeCycle:StageStatus sagemaker:ResourceTag/${TagKey}	Write
UpdateMonitoringAlert	Grants permission to update a monitoring alert	monitoring-schedule*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateMonitoringAlert	Grants permission to update a monitoring alert	monitoring-schedule-alert*		Write
UpdateMonitoringSchedule	Grants permission to update a monitoring schedule	monitoring-schedule*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:InstanceTypes sagemaker:InterContainerTrafficEncryption sagemaker:MaxRuntimeInSeconds sagemaker:NetworkIsolation sagemaker:OutputKmsKeyArn sagemaker:ResourceTag/${TagKey} sagemaker:VolumeKmsKeyArn sagemaker:VpcSecurityGroupIds sagemaker:VpcSubnets	Write
UpdateNotebookInstance	Grants permission to update a notebook instance. Notebook instance updates include upgrading or downgrading the EC2 instance used for your notebook instance to accommodate changes in your workload requirements	notebook-instance*	aws:ResourceTag/${TagKey} sagemaker:AcceleratorTypes sagemaker:InstanceTypes sagemaker:MinimumInstanceMetadataServiceVersion sagemaker:NotebookInstanceLifecycleConfigArns sagemaker:ResourceTag/${TagKey} sagemaker:RootAccess	Write
UpdateNotebookInstanceLifecycleConfig	Grants permission to updates a notebook instance lifecycle configuration created with the CreateNotebookInstanceLifecycleConfig API	notebook-instance-lifecycle-config*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdatePartnerApp	Grants permission to update an Amazon SageMaker Partner AI App	partner-app*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdatePipeline	Grants permission to update a pipeline	pipeline*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdatePipelineExecution	Grants permission to update a pipeline execution	pipeline-execution*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdatePipelineVersion	Grants permission to update a pipeline version	pipeline*	aws:ResourceTag/${TagKey} sagemaker:PipelineVersionId sagemaker:ResourceTag/${TagKey}	Write
UpdateProject	Grants permission to update a Project	project*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
UpdateReward	Grants permission to submit reward scores for a trajectory in a job	job*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateSpace	Grants permission to update a Space	space*	aws:ResourceTag/${TagKey} sagemaker:ImageArns sagemaker:ImageVersionArns sagemaker:InstanceTypes sagemaker:OwnerUserProfileArn sagemaker:RemoteAccess sagemaker:ResourceTag/${TagKey} sagemaker:SpaceSharingType sagemaker:StudioLifecycleConfigArns	Write
UpdateTrainingJob	Grants permission to update a training job	training-job*	aws:ResourceTag/${TagKey} sagemaker:EnableRemoteDebug sagemaker:InstanceTypes sagemaker:KeepAlivePeriod sagemaker:ResourceTag/${TagKey}	Write
UpdateTrial	Grants permission to update a trial	experiment-trial*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateTrialComponent	Grants permission to update a trial component	experiment-trial-component*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateUserProfile	Grants permission to update a UserProfile	user-profile*	aws:ResourceTag/${TagKey} sagemaker:DomainSharingOutputKmsKeyArn sagemaker:ImageArns sagemaker:ImageVersionArns sagemaker:InstanceTypes sagemaker:ResourceTag/${TagKey} sagemaker:StudioLifecycleConfigArns sagemaker:VpcSecurityGroupIds	Write
UpdateWorkforce	Grants permission to update a workforce	workforce*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateWorkteam	Grants permission to update a workteam	workteam*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write

Permission-only actions for Amazon SageMaker

The following actions are defined by Amazon SageMaker but are not directly invocable through any API operation. They can only be used in IAM policy statements to grant or deny permissions.

Actions	Description	Resource types (*required)	Condition keys	Access level
AccessModelPackage	Grants permission to access model package that can be used in Amazon SageMaker training or hosting services	model-package*	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}	Read
CallWithBearerToken	Grants permission to use bearer token in SageMaker Job and Inference runtime endpoints APIs		sagemaker:BearerTokenType	Read
CreateReservedCapacity	Grants permission to create a reserved capacity	reserved-capacity*	aws:RequestTag/${TagKey} aws:ResourceTag/${TagKey} aws:TagKeys sagemaker:ResourceTag/${TagKey}	Write
CreateSharedModel	Grants permission to create a shared model in a SageMaker Studio application	shared-model*		Write
DeleteResourcePolicy	Grants Amazon Resource Access Manager permission to delete a resource policy on a SageMaker resource that supports cross-account sharing			Write
DescribeClusterInference	Grants permission to get information about the inference operator for a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Read
DescribeSharedModel	Grants permission to describe a shared model in a SageMaker Studio application	shared-model*		Read
GetResourcePolicy	Grants Amazon Resource Access Manager permission to retrieve a resource policy on a SageMaker resource that supports cross-account sharing			Read
ListSharedModelEvents	Grants permission to list shared model events			List
ListSharedModelVersions	Grants permission to list shared model versions	shared-model*		List
ListSharedModels	Grants permission to list shared models			List
PutResourcePolicy	Grants Amazon Resource Access Manager permission to create a resource policy on a SageMaker resource that supports cross-account sharing			Write
SendSharedModelEvent	Grants permission to send a shared model event	shared-model-event*		Write
UpdateClusterInference	Grants permission to update the inference operator for a SageMaker HyperPod cluster	cluster*	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}	Write
UpdateSharedModel	Grants permission to update a shared model	shared-model*		Write

Resource types defined by Amazon SageMaker

The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements.

Resource types	ARN	Condition keys
action	arn:${Partition}:sagemaker:${Region}:${Account}:action/${ActionName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
ai-benchmark-job	arn:${Partition}:sagemaker:${Region}:${Account}:ai-benchmark-job/${AIBenchmarkJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
ai-recommendation-job	arn:${Partition}:sagemaker:${Region}:${Account}:ai-recommendation-job/${AIRecommendationJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
ai-workload-config	arn:${Partition}:sagemaker:${Region}:${Account}:ai-workload-config/${AIWorkloadConfigName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
algorithm	arn:${Partition}:sagemaker:${Region}:${Account}:algorithm/${AlgorithmName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
app	arn:${Partition}:sagemaker:${Region}:${Account}:app/${DomainId}/${UserProfileName}/${AppType}/${AppName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
app-image-config	arn:${Partition}:sagemaker:${Region}:${Account}:app-image-config/${AppImageConfigName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
artifact	arn:${Partition}:sagemaker:${Region}:${Account}:artifact/${HashOfArtifactSource}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
automl-job	arn:${Partition}:sagemaker:${Region}:${Account}:automl-job/${AutoMLJobJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
cluster	arn:${Partition}:sagemaker:${Region}:${Account}:cluster/${ClusterId}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
cluster-scheduler-config	arn:${Partition}:sagemaker:${Region}:${Account}:cluster-scheduler-config/${ClusterSchedulerConfigId}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
code-repository	arn:${Partition}:sagemaker:${Region}:${Account}:code-repository/${CodeRepositoryName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
compilation-job	arn:${Partition}:sagemaker:${Region}:${Account}:compilation-job/${CompilationJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
compute-quota	arn:${Partition}:sagemaker:${Region}:${Account}:compute-quota/${ComputeQuotaId}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
context	arn:${Partition}:sagemaker:${Region}:${Account}:context/${ContextName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
data-quality-job-definition	arn:${Partition}:sagemaker:${Region}:${Account}:data-quality-job-definition/${DataQualityJobDefinitionName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
device	arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/${DeviceFleetName}/device/${DeviceName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
device-fleet	arn:${Partition}:sagemaker:${Region}:${Account}:device-fleet/${DeviceFleetName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
domain	arn:${Partition}:sagemaker:${Region}:${Account}:domain/${DomainId}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
edge-deployment-plan	arn:${Partition}:sagemaker:${Region}:${Account}:edge-deployment/${EdgeDeploymentPlanName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
edge-packaging-job	arn:${Partition}:sagemaker:${Region}:${Account}:edge-packaging-job/${EdgePackagingJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
endpoint	arn:${Partition}:sagemaker:${Region}:${Account}:endpoint/${EndpointName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
endpoint-config	arn:${Partition}:sagemaker:${Region}:${Account}:endpoint-config/${EndpointConfigName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
experiment	arn:${Partition}:sagemaker:${Region}:${Account}:experiment/${ExperimentName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
experiment-trial	arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial/${TrialName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
experiment-trial-component	arn:${Partition}:sagemaker:${Region}:${Account}:experiment-trial-component/${TrialComponentName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
feature-group	arn:${Partition}:sagemaker:${Region}:${Account}:feature-group/${FeatureGroupName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
flow-definition	arn:${Partition}:sagemaker:${Region}:${Account}:flow-definition/${FlowDefinitionName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
hub	arn:${Partition}:sagemaker:${Region}:${Account}:hub/${HubName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
hub-content	arn:${Partition}:sagemaker:${Region}:${Account}:hub-content/${HubName}/${HubContentType}/${HubContentName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
human-loop	arn:${Partition}:sagemaker:${Region}:${Account}:human-loop/${HumanLoopName}
human-task-ui	arn:${Partition}:sagemaker:${Region}:${Account}:human-task-ui/${HumanTaskUiName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
hyper-parameter-tuning-job	arn:${Partition}:sagemaker:${Region}:${Account}:hyper-parameter-tuning-job/${HyperParameterTuningJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
image	arn:${Partition}:sagemaker:${Region}:${Account}:image/${ImageName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
image-version	arn:${Partition}:sagemaker:${Region}:${Account}:image-version/${ImageName}/${Version}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
inference-component	arn:${Partition}:sagemaker:${Region}:${Account}:inference-component/${InferenceComponentName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
inference-experiment	arn:${Partition}:sagemaker:${Region}:${Account}:inference-experiment/${InferenceExperimentName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
inference-recommendations-job	arn:${Partition}:sagemaker:${Region}:${Account}:inference-recommendations-job/${InferenceRecommendationsJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
job	arn:${Partition}:sagemaker:${Region}:${Account}:job/${JobCategory}/${JobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
labeling-job	arn:${Partition}:sagemaker:${Region}:${Account}:labeling-job/${LabelingJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
lineage-group	arn:${Partition}:sagemaker:${Region}:${Account}:lineage-group/${LineageGroupName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
mlflow-app	arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-app/${MLflowAppId}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
mlflow-tracking-server	arn:${Partition}:sagemaker:${Region}:${Account}:mlflow-tracking-server/${MlflowTrackingServerName}
model	arn:${Partition}:sagemaker:${Region}:${Account}:model/${ModelName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
model-bias-job-definition	arn:${Partition}:sagemaker:${Region}:${Account}:model-bias-job-definition/${ModelBiasJobDefinitionName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
model-card	arn:${Partition}:sagemaker:${Region}:${Account}:model-card/${ModelCardName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
model-card-export-job	arn:${Partition}:sagemaker:${Region}:${Account}:model-card/${ModelCardName}/export-job/${ExportJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
model-explainability-job-definition	arn:${Partition}:sagemaker:${Region}:${Account}:model-explainability-job-definition/${ModelExplainabilityJobDefinitionName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
model-package	arn:${Partition}:sagemaker:${Region}:${Account}:model-package/${ModelPackageName}	aws:ResourceTag/${TagKey} sagemaker:CurrentCustomerMetadataProperties/${MetadataKey} sagemaker:CurrentModelLifeCycleStage sagemaker:CurrentModelLifeCycleStageStatus sagemaker:ResourceTag/${TagKey}
model-package-group	arn:${Partition}:sagemaker:${Region}:${Account}:model-package-group/${ModelPackageGroupName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
model-quality-job-definition	arn:${Partition}:sagemaker:${Region}:${Account}:model-quality-job-definition/${ModelQualityJobDefinitionName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
monitoring-schedule	arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/${MonitoringScheduleName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
monitoring-schedule-alert	arn:${Partition}:sagemaker:${Region}:${Account}:monitoring-schedule/${MonitoringScheduleName}/alert/${MonitoringScheduleAlertName}
notebook-instance	arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance/${NotebookInstanceName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
notebook-instance-lifecycle-config	arn:${Partition}:sagemaker:${Region}:${Account}:notebook-instance-lifecycle-config/${NotebookInstanceLifecycleConfigName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
optimization-job	arn:${Partition}:sagemaker:${Region}:${Account}:optimization-job/${OptimizationJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
partner-app	arn:${Partition}:sagemaker:${Region}:${Account}:partner-app/${AppId}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
pipeline	arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/${PipelineName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
pipeline-execution	arn:${Partition}:sagemaker:${Region}:${Account}:pipeline/${PipelineName}/execution/${RandomString}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
processing-job	arn:${Partition}:sagemaker:${Region}:${Account}:processing-job/${ProcessingJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
project	arn:${Partition}:sagemaker:${Region}:${Account}:project/${ProjectName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
reserved-capacity	arn:${Partition}:sagemaker:${Region}:${Account}:reserved-capacity/${RandomString}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
sagemaker-catalog	arn:${Partition}:sagemaker:${Region}:${Account}:sagemaker-catalog/${ResourceCatalogName}
shared-model	arn:${Partition}:sagemaker:${Region}:${Account}:shared-model/${SharedModelId}
shared-model-event	arn:${Partition}:sagemaker:${Region}:${Account}:shared-model-event/${EventId}
space	arn:${Partition}:sagemaker:${Region}:${Account}:space/${DomainId}/${SpaceName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
studio-lifecycle-config	arn:${Partition}:sagemaker:${Region}:${Account}:studio-lifecycle-config/${StudioLifecycleConfigName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
training-job	arn:${Partition}:sagemaker:${Region}:${Account}:training-job/${TrainingJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
training-plan	arn:${Partition}:sagemaker:${Region}:${Account}:training-plan/${TrainingPlanName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
transform-job	arn:${Partition}:sagemaker:${Region}:${Account}:transform-job/${TransformJobName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
user-profile	arn:${Partition}:sagemaker:${Region}:${Account}:user-profile/${DomainId}/${UserProfileName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
workforce	arn:${Partition}:sagemaker:${Region}:${Account}:workforce/${WorkforceName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}
workteam	arn:${Partition}:sagemaker:${Region}:${Account}:workteam/${WorkteamName}	aws:ResourceTag/${TagKey} sagemaker:ResourceTag/${TagKey}

Condition keys for Amazon SageMaker

Amazon SageMaker defines the following condition keys that can be used in the Condition element of an IAM policy.

Condition keys	Description	Type
aws:RequestTag/${TagKey}	Filters access by a key that is present in the request the user makes to the SageMaker service	String
aws:ResourceTag/${TagKey}	Filters access by a tag key and value pair	String
aws:TagKeys	Filters access by the list of all the tag key names associated with the resource in the request	ArrayOfString
sagemaker:AcceleratorTypes	Filters access by the list of all accelerator types associated with the resource in the request	ArrayOfString
sagemaker:AppNetworkAccessType	Filters access by the app network access type associated with the resource in the request	String
sagemaker:BearerTokenType	Filters access by the type of bearer token used in the request	String
sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}	Filters access by a current metadata key and value pair associated with the model-package resource	String
sagemaker:CurrentModelLifeCycleStage	Filters access by the current value of the Stage field in the model life cycle object associated with the model-package resource	String
sagemaker:CurrentModelLifeCycleStageStatus	Filters access by the current value of the StageStatus field in the model life cycle object associated with the model-package resource	String
sagemaker:CustomerMetadataProperties/${MetadataKey}	Filters access by a metadata key and value pair	String
sagemaker:CustomerMetadataPropertiesToRemove	Filters access by the list of metadata properties associated with the model-package resource in the request	ArrayOfString
sagemaker:DirectGatedModelAccess	Used to deny direct access to SageMaker gated ModelReferences	String
sagemaker:DirectInternetAccess	Filters access by the direct internet access associated with the resource in the request	String
sagemaker:DomainId	You can use the domainId as a policy variable to filter requests from specific SageMaker Domains	String
sagemaker:DomainSharingOutputKmsKey	Filters access by the Domain sharing output KMS key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:DomainSharingOutputKmsKeyArn	ARN
sagemaker:DomainSharingOutputKmsKeyArn	Filters access by the Domain sharing output KMS key associated with the resource in the request. The ARN of the key-id must be used	ARN
sagemaker:EnableRemoteDebug	Filters access by the remote debug config in the request	Bool
sagemaker:FeatureGroupDisableGlueTableCreation	Filters access by the DisableGlueTableCreation flag associated with the feature group resource in the request	Bool
sagemaker:FeatureGroupEnableOnlineStore	Filters access by the EnableOnlineStore flag associated with feature group in the request	Bool
sagemaker:FeatureGroupOfflineStoreConfig	Filters access by the presence of an OfflineStoreConfig in the feature group resource in the request. This access filter only supports the null-conditional operator	Bool
sagemaker:FeatureGroupOfflineStoreKmsKey	Filters access by the offline store kms key associated with the feature group resource in the request. This key has been deprecated. It has been replaced by sagemaker:FeatureGroupOfflineStoreKmsKeyArn	ARN
sagemaker:FeatureGroupOfflineStoreKmsKeyArn	Filters access by the offline store kms key associated with the feature group resource in the request. The ARN of the key-id must be used	ARN
sagemaker:FeatureGroupOfflineStoreS3Uri	Filters access by the offline store s3 uri associated with the feature group resource in the request	String
sagemaker:FeatureGroupOnlineStoreKmsKey	Filters access by the online store kms key associated with the feature group resource in the request. This key has been deprecated. It has been replaced by sagemaker:FeatureGroupOnlineStoreKmsKeyArn	ARN
sagemaker:FeatureGroupOnlineStoreKmsKeyArn	Filters access by the online store kms key associated with the feature group resource in the request. The ARN of the key-id must be used	ARN
sagemaker:FileSystemAccessMode	Filters access by a file system access mode associated with the resource in the request	String
sagemaker:FileSystemDirectoryPath	Filters access by a file system directory path associated with the resource in the request	String
sagemaker:FileSystemId	Filters access by a file system ID associated with the resource in the request	String
sagemaker:FileSystemType	Filters access by a file system type associated with the resource in the request	String
sagemaker:HomeEfsFileSystemKmsKey	Filters access by a key that is present in the request the user makes to the SageMaker service. This key has been deprecated. It has been replaced by sagemaker:VolumeKmsKeyArn	ARN
sagemaker:ImageArns	Filters access by the list of all image arns associated with the resource in the request	ArrayOfARN
sagemaker:ImageVersionArns	Filters access by the list of all image version arns associated with the resource in the request	ArrayOfARN
sagemaker:InstanceTypes	Filters access by the list of all instance types associated with the resource in the request	ArrayOfString
sagemaker:InterContainerTrafficEncryption	Filters access by the inter container traffic encryption associated with the resource in the request	Bool
sagemaker:KeepAlivePeriod	Filters access by the keep-alive period associated with the resource in the request	Numeric
sagemaker:MaxRuntimeInSeconds	Filters access by the max runtime in seconds associated with the resource in the request	Numeric
sagemaker:MinimumInstanceMetadataServiceVersion	Filters access by the minimum instance metadata service version used by the resource in the request	String
sagemaker:ModelApprovalStatus	Filters access by the model approval status with the model-package in the request	String
sagemaker:ModelArn	Filters access by the model arn associated with the resource in the request	ARN
sagemaker:ModelLifeCycle:Stage	Filters access by stage field in the model life cycle object associated with the model-package resource in the request	String
sagemaker:ModelLifeCycle:StageStatus	Filters access by stageStatus field in the model life cycle object associated with the model-package resource in the request	String
sagemaker:NetworkIsolation	Filters access by the network isolation associated with the resource in the request	Bool
sagemaker:NotebookInstanceLifecycleConfigArns	Filters access by the list of notebook instance lifecycle configuration ARNs associated with the resource in the request	ArrayOfARN
sagemaker:OutputKmsKey	Filters access by the output kms key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:OutputKmsKeyArn	ARN
sagemaker:OutputKmsKeyArn	Filters access by the output kms key associated with the resource in the request. The ARN of the key-id must be used	ARN
sagemaker:OwnerUserProfileArn	Filters access by the OwnerUserProfile arn associated with the space in the request	ARN
sagemaker:PipelineVersionId	Filters access to specific version IDs of a Sagemaker pipeline	String
sagemaker:RemoteAccess	Filters access by the remote access flag associated with the space in the request	String
sagemaker:ResourceTag/	Filters access by the preface string for a tag key and value pair attached to a resource	String
sagemaker:ResourceTag/${TagKey}	Filters access by a tag key and value pair	String
sagemaker:RootAccess	Filters access by the root access associated with the resource in the request	String
sagemaker:SearchVisibilityCondition/${FilterKey}	Limits the results of your search request to the resources that you can access. ${FilterKey} is a key that the VisibilityConditions configuration presents in the Search request	String
sagemaker:ServerlessMaxConcurrency	Filters access by limiting maximum concurrency used for Serverless inference in the request	Numeric
sagemaker:ServerlessMemorySize	Filters access by limiting memory size used for Serverless inference in the request	Numeric
sagemaker:SpaceSharingType	Filters access by the sharing type associated with the space in the request	String
sagemaker:StudioLifecycleConfigArns	Filters access by the list of lifecycle configuration ARNs associated with the resource in the request	ArrayOfARN
sagemaker:TaggingAction	Filters access by the API actions to which a user can apply tags. Uses the name of the API operation that creates a taggable resource to filter access	String
sagemaker:TargetModel	Filters access by the target model associated with the Multi-Model Endpoint in the request	String
sagemaker:UserProfileName	You can use the UserProfileName as a policy variable to filter requests from specific user profiles within a SageMaker Domain. This context key is not applicable to user profiles within shared spaces	String
sagemaker:VolumeKmsKey	Filters access by the volume kms key associated with the resource in the request. This key has been deprecated. It has been replaced by sagemaker:VolumeKmsKeyArn	ARN
sagemaker:VolumeKmsKeyArn	Filters access by the volume kms key associated with the resource in the request. The ARN of the key-id must be used	ARN
sagemaker:VpcSecurityGroupIds	Filters access by the list of all VPC security group ids associated with the resource in the request	ArrayOfString
sagemaker:VpcSubnets	Filters access by the list of all VPC subnets associated with the resource in the request	ArrayOfString
sagemaker:WorkteamArn	Filters access by the workteam arn associated to the request	ARN
sagemaker:WorkteamType	Filters access by the workteam type associated to the request. This can be public-crowd, private-crowd or vendor-crowd	String

Javascript is disabled or is unavailable in your browser.

To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions.

Amazon S3 Tables (s3tables)

Amazon Simple Workflow Service (swf)