Amazon适用于 Amazon 的托管策略 SageMaker Ground Truth - Amazon SageMaker
Amazon Web Services 文档中描述的 Amazon Web Services 服务或功能可能因区域而异。要查看适用于中国区域的差异,请参阅中国的 Amazon Web Services 服务入门

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

Amazon适用于 Amazon 的托管策略 SageMaker Ground Truth

这些Amazon托管策略添加使用所需的权限 SageMaker Ground Truth。这些策略可在您的中找到Amazon账户,并由从 SageMaker 控制台。

Amazon托管策略:AmazonSageMakerGroundTruthExecution

该Amazon托管策略授予通常需要使用的权限 SageMaker Ground Truth。

权限详细信息

此策略包含以下权限。

  • lambda— 允许委托人调用名称包括 “sagemaker”(不区分大小写)、“GTPefic” 或 “labelingFunction” 的 Lambda 函数。

  • s3— 允许委托人从 Amazon S3 存储桶添加和检索对象。这些对象仅限于那些不区分大小写的名称包含 “groundtruth” 或 “sagemaker” 或者标记为 “SageMaker” 的对象。

  • cloudwatch— 允许校长发布 CloudWatch 指标。

  • logs— 允许委托人创建和访问日志流以及发布日志事件。

  • sqs— 允许委托人创建 Amazon SQS 队列,以及发送和接收 Amazon SQS 消息。这些权限仅限于名称包含 “GroundTruth” 的队列。

  • sns— 允许委托人订阅并向其发布消息,其名称不区分大小写的名称包含 “groundtruth” 或 “sagemaker” 的 Amazon SNS 主题。

  • ec2— 创建、描述和删除 VPC 终端节点服务名称包含 “sagemaker-Task-资源” 或 “标签” 的 Amazon VPC 终端节点的权限。

{ "Version": "2012-10-17", "Statement": [ { "Sid": "CustomLabelingJobs", "Effect": "Allow", "Action": [ "lambda:InvokeFunction" ], "Resource": [ "arn:aws:lambda:*:*:function:*GtRecipe*", "arn:aws:lambda:*:*:function:*LabelingFunction*", "arn:aws:lambda:*:*:function:*SageMaker*", "arn:aws:lambda:*:*:function:*sagemaker*", "arn:aws:lambda:*:*:function:*Sagemaker*" ] }, { "Effect": "Allow", "Action": [ "s3:AbortMultipartUpload", "s3:GetObject", "s3:PutObject" ], "Resource": [ "arn:aws:s3:::*GroundTruth*", "arn:aws:s3:::*Groundtruth*", "arn:aws:s3:::*groundtruth*", "arn:aws:s3:::*SageMaker*", "arn:aws:s3:::*Sagemaker*", "arn:aws:s3:::*sagemaker*" ] }, { "Effect": "Allow", "Action": [ "s3:GetObject" ], "Resource": "*", "Condition": { "StringEqualsIgnoreCase": { "s3:ExistingObjectTag/SageMaker": "true" } } }, { "Effect": "Allow", "Action": [ "s3:GetBucketLocation", "s3:ListBucket" ], "Resource": "*" }, { "Sid": "CloudWatch", "Effect": "Allow", "Action": [ "cloudwatch:PutMetricData", "logs:CreateLogStream", "logs:CreateLogGroup", "logs:DescribeLogStreams", "logs:PutLogEvents" ], "Resource": "*" }, { "Sid": "StreamingQueue", "Effect": "Allow", "Action": [ "sqs:CreateQueue", "sqs:DeleteMessage", "sqs:GetQueueAttributes", "sqs:GetQueueUrl", "sqs:ReceiveMessage", "sqs:SendMessage", "sqs:SetQueueAttributes" ], "Resource": "arn:aws:sqs:*:*:*GroundTruth*" }, { "Sid": "StreamingTopicSubscribe", "Effect": "Allow", "Action": "sns:Subscribe", "Resource": [ "arn:aws:sns:*:*:*GroundTruth*", "arn:aws:sns:*:*:*Groundtruth*", "arn:aws:sns:*:*:*groundTruth*", "arn:aws:sns:*:*:*groundtruth*", "arn:aws:sns:*:*:*SageMaker*", "arn:aws:sns:*:*:*Sagemaker*", "arn:aws:sns:*:*:*sageMaker*", "arn:aws:sns:*:*:*sagemaker*" ], "Condition": { "StringEquals": { "sns:Protocol": "sqs" }, "StringLike": { "sns:Endpoint": "arn:aws:sqs:*:*:*GroundTruth*" } } }, { "Sid": "StreamingTopic", "Effect": "Allow", "Action": [ "sns:Publish" ], "Resource": [ "arn:aws:sns:*:*:*GroundTruth*", "arn:aws:sns:*:*:*Groundtruth*", "arn:aws:sns:*:*:*groundTruth*", "arn:aws:sns:*:*:*groundtruth*", "arn:aws:sns:*:*:*SageMaker*", "arn:aws:sns:*:*:*Sagemaker*", "arn:aws:sns:*:*:*sageMaker*", "arn:aws:sns:*:*:*sagemaker*" ] }, { "Sid": "StreamingTopicUnsubscribe", "Effect": "Allow", "Action": [ "sns:Unsubscribe" ], "Resource": "*" }, { "Sid": "WorkforceVPC", "Effect": "Allow", "Action": [ "ec2:CreateVpcEndpoint", "ec2:DescribeVpcEndpoints", "ec2:DeleteVpcEndpoints" ], "Resource": "*", "Condition": { "StringLikeIfExists": { "ec2:VpceServiceName": [ "*sagemaker-task-resources*", "aws.sagemaker*labeling*" ] } } } ] }

亚马逊 SageMaker SageMaker Ground Truth 托管策略的更新

查看有关更新的详细信息Amazon适用于 Amazon 的托管策略 SageMaker 从该服务开始跟踪这些更改开始,Ground Truth True。要获得有关此页面更改的自动提示,请订阅上的 RSS 源。 SageMaker 文档历史记录页面。

策略 版本 更改 日期

AmazonSageMakerGroundTruthExecution

3

Addec2:CreateVpcEndpointec2:DescribeVpcEndpoints, 和ec2:DeleteVpcEndpoints权限。

2022 年 4 月 29 日

AmazonSageMakerGroundTruthExecution

2

Removesqs:SendMessageBatch权限。

2022 年 4 月 11 日

AmazonSageMakerGroundTruthExecution

1

初始策略

2020 年 7 月 20 日