Skip to content

Policy: AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary

ARN: arn:aws:iam::aws:policy/AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary

Allowed Actions

Actions Services
application-autoscaling:DeleteScalingPolicy application-autoscaling
application-autoscaling:DeleteScheduledAction application-autoscaling
application-autoscaling:DeregisterScalableTarget application-autoscaling
application-autoscaling:DescribeScalableTargets application-autoscaling
application-autoscaling:DescribeScalingActivities application-autoscaling
application-autoscaling:DescribeScalingPolicies application-autoscaling
application-autoscaling:DescribeScheduledActions application-autoscaling
application-autoscaling:PutScalingPolicy application-autoscaling
application-autoscaling:PutScheduledAction application-autoscaling
application-autoscaling:RegisterScalableTarget application-autoscaling
athena:BatchGetNamedQuery athena
athena:BatchGetPreparedStatement athena
athena:BatchGetQueryExecution athena
athena:CreateNamedQuery athena
athena:CreateNotebook athena
athena:CreatePreparedStatement athena
athena:CreatePresignedNotebookUrl athena
athena:DeleteNamedQuery athena
athena:DeleteNotebook athena
athena:DeletePreparedStatement athena
athena:ExportNotebook athena
athena:GetDataCatalog athena
athena:GetDatabase athena
athena:GetNamedQuery athena
athena:GetPreparedStatement athena
athena:GetQueryExecution athena
athena:GetQueryResults athena
athena:GetQueryResultsStream athena
athena:GetQueryRuntimeStatistics athena
athena:GetTableMetadata athena
athena:GetWorkGroup athena
athena:ImportNotebook athena
athena:ListDataCatalogs athena
athena:ListDatabases athena
athena:ListEngineVersions athena
athena:ListNamedQueries athena
athena:ListPreparedStatements athena
athena:ListQueryExecutions athena
athena:ListTableMetadata athena
athena:ListTagsForResource athena
athena:ListWorkGroups athena
athena:StartCalculationExecution athena
athena:StartQueryExecution athena
athena:StartSession athena
athena:StopCalculationExecution athena
athena:StopQueryExecution athena
athena:TerminateSession athena
athena:UpdateNamedQuery athena
athena:UpdateNotebook athena
athena:UpdateNotebookMetadata athena
athena:UpdatePreparedStatement athena
aws-marketplace:ViewSubscriptions aws-marketplace
cloudformation:GetTemplateSummary cloudformation
cloudformation:ListStackResources cloudformation
cloudwatch:DeleteAlarms cloudwatch
cloudwatch:DescribeAlarms cloudwatch
cloudwatch:GetMetricData cloudwatch
cloudwatch:GetMetricStatistics cloudwatch
cloudwatch:ListMetrics cloudwatch
cloudwatch:PutMetricAlarm cloudwatch
cloudwatch:PutMetricData cloudwatch
codebuild:BatchGetBuilds codebuild
codebuild:StartBuild codebuild
codecommit:BatchGetRepositories codecommit
codecommit:CreateRepository codecommit
codecommit:GetRepository codecommit
codecommit:GitPull codecommit
codecommit:GitPush codecommit
codecommit:List* codecommit
datazone:* datazone
ec2:CreateNetworkInterface ec2
ec2:CreateNetworkInterfacePermission ec2
ec2:DeleteNetworkInterface ec2
ec2:DeleteNetworkInterfacePermission ec2
ec2:DescribeDhcpOptions ec2
ec2:DescribeNetworkInterfaces ec2
ec2:DescribeRouteTables ec2
ec2:DescribeSecurityGroups ec2
ec2:DescribeSubnets ec2
ec2:DescribeVpcEndpointServices ec2
ec2:DescribeVpcEndpoints ec2
ec2:DescribeVpcs ec2
ecr:BatchCheckLayerAvailability ecr
ecr:BatchDeleteImage ecr
ecr:BatchGetImage ecr
ecr:CompleteLayerUpload ecr
ecr:CreateRepository ecr
ecr:DeleteRepository ecr
ecr:DeleteRepositoryPolicy ecr
ecr:Describe* ecr
ecr:GetAuthorizationToken ecr
ecr:GetDownloadUrlForLayer ecr
ecr:InitiateLayerUpload ecr
ecr:PutImage ecr
ecr:SetRepositoryPolicy ecr
ecr:StartImageScan ecr
ecr:TagResource ecr
ecr:UntagResource ecr
ecr:UploadLayerPart ecr
elastic-inference:Connect elastic-inference
elasticfilesystem:DescribeFileSystems elasticfilesystem
elasticfilesystem:DescribeMountTargets elasticfilesystem
elasticmapreduce:DescribeCluster elasticmapreduce
elasticmapreduce:ListClusters elasticmapreduce
elasticmapreduce:ListInstanceGroups elasticmapreduce
events:DescribeRule events
events:ListTagsForResource events
events:PutRule events
events:PutTargets events
events:TagResource events
forecast:CreateAutoPredictor forecast
forecast:CreateDataset forecast
forecast:CreateDatasetGroup forecast
forecast:CreateDatasetImportJob forecast
forecast:CreateExplainability forecast
forecast:CreateExplainabilityExport forecast
forecast:CreateForecast forecast
forecast:CreateForecastEndpoint forecast
forecast:CreateForecastExportJob forecast
forecast:CreatePredictor forecast
forecast:CreatePredictorBacktestExportJob forecast
forecast:DeleteResourceTree forecast
forecast:DescribeAutoPredictor forecast
forecast:DescribeDataset forecast
forecast:DescribeDatasetImportJob forecast
forecast:DescribeExplainability forecast
forecast:DescribeExplainabilityExport forecast
forecast:DescribeForecast forecast
forecast:DescribeForecastEndpoint forecast
forecast:DescribeForecastExportJob forecast
forecast:DescribePredictor forecast
forecast:DescribePredictorBacktestExportJob forecast
forecast:GetAccuracyMetrics forecast
forecast:GetRecentForecastContext forecast
forecast:InvokeForecastEndpoint forecast
forecast:TagResource forecast
fsx:DescribeFileSystems fsx
glue:DataQuality glue
glue:BatchCreatePartition glue
glue:BatchDeleteConnection glue
glue:BatchDeletePartition glue
glue:BatchDeleteTable glue
glue:BatchDeleteTableVersion glue
glue:BatchGet* glue
glue:BatchGetJobs glue
glue:BatchGetJobs glue
glue:BatchGetWorkflows glue
glue:BatchGetWorkflows glue
glue:BatchStopJobRun glue
glue:BatchUpdatePartition glue
glue:CreateBlueprint glue
glue:CreateConnection glue
glue:CreateCrawler glue
glue:CreateDataQualityRuleset glue
glue:CreateDatabase glue
glue:CreateJob glue
glue:CreatePartition glue
glue:CreatePartitionIndex glue
glue:CreateSession glue
glue:CreateTable glue
glue:CreateWorkflow glue
glue:CreateWorkflow glue
glue:DeleteBlueprint glue
glue:DeleteColumnStatisticsForPartition glue
glue:DeleteColumnStatisticsForTable glue
glue:DeleteConnection glue
glue:DeleteCrawler glue
glue:DeleteJob glue
glue:DeletePartition glue
glue:DeletePartitionIndex glue
glue:DeleteTable glue
glue:DeleteTableVersion glue
glue:DeleteWorkflow glue
glue:Get* glue
glue:GetColumnStatisticsForPartition glue
glue:GetColumnStatisticsForTable glue
glue:GetConnection glue
glue:GetConnection glue
glue:GetDatabase glue
glue:GetDatabase glue
glue:GetDatabases glue
glue:GetPartition glue
glue:GetPartition glue
glue:GetPartitions glue
glue:GetPartitions glue
glue:GetTable glue
glue:GetTable glue
glue:GetTables glue
glue:List* glue
glue:ListJobs glue
glue:ListSchemas glue
glue:ListSchemas glue
glue:NotifyEvent glue
glue:NotifyEvent glue
glue:PutWorkflowRunProperties glue
glue:ResetJobBookmark glue
glue:ResumeWorkflowRun glue
glue:RunStatement glue
glue:RunStatement glue
glue:SearchTables glue
glue:SearchTables glue
glue:SearchTables glue
glue:StartBlueprintRun glue
glue:StartCrawler glue
glue:StartCrawlerSchedule glue
glue:StartJobRun glue
glue:StartWorkflowRun glue
glue:StopCrawler glue
glue:StopCrawlerSchedule glue
glue:StopWorkflowRun glue
glue:UpdateBlueprint glue
glue:UpdateColumnStatisticsForPartition glue
glue:UpdateColumnStatisticsForTable glue
glue:UpdateConnection glue
glue:UpdateCrawler glue
glue:UpdateCrawlerSchedule glue
glue:UpdateJob glue
glue:UpdatePartition glue
glue:UpdateTable glue
glue:UpdateWorkflow glue
groundtruthlabeling:* groundtruthlabeling
iam:CreateServiceLinkedRole iam
iam:GetRole iam
iam:ListRoles iam
iam:PassRole iam
kms:Decrypt kms
kms:Decrypt kms
kms:DescribeKey kms
kms:DescribeKey kms
kms:DescribeKey kms
kms:Encrypt kms
kms:GenerateDataKey kms
kms:ListAliases kms
kms:ListKeys kms
kms:ListKeys kms
kms:RetireGrant kms
lakeformation:GetDataAccess lakeformation
lambda:InvokeFunction lambda
lambda:ListFunctions lambda
logs:CreateLogDelivery logs
logs:CreateLogGroup logs
logs:CreateLogStream logs
logs:DeleteLogDelivery logs
logs:DescribeLogGroups logs
logs:DescribeLogStreams logs
logs:GetLogDelivery logs
logs:GetLogEvents logs
logs:ListLogDeliveries logs
logs:PutLogEvents logs
logs:UpdateLogDelivery logs
ram:AcceptResourceShareInvitation ram
rds:DescribeDBInstances rds
redshift:CreateClusterUser redshift
redshift:DescribeClusters redshift
redshift:GetClusterCredentials redshift
redshift:GetClusterCredentialsWithIAM redshift
redshift-data:BatchExecuteStatement redshift-data
redshift-data:CancelStatement redshift-data
redshift-data:DescribeStatement redshift-data
redshift-data:DescribeTable redshift-data
redshift-data:ExecuteStatement redshift-data
redshift-data:GetStatementResult redshift-data
redshift-data:ListSchemas redshift-data
redshift-data:ListTables redshift-data
redshift-serverless:GetCredentials redshift-serverless
redshift-serverless:GetNamespace redshift-serverless
redshift-serverless:GetWorkgroup redshift-serverless
redshift-serverless:ListNamespaces redshift-serverless
redshift-serverless:ListWorkgroups redshift-serverless
s3:AbortMultipartUpload s3
s3:DeleteObject s3
s3:DeleteObjectVersion s3
s3:GetBucketAcl s3
s3:GetBucketCors s3
s3:GetBucketLocation s3
s3:GetObject s3
s3:GetObject s3
s3:GetObject s3
s3:GetObject s3
s3:ListAllMyBuckets s3
s3:ListBucket s3
s3:PutBucketCors s3
s3:PutObject s3
s3:PutObjectAcl s3
s3:PutObjectRetention s3
s3:ReplicateObject s3
s3:RestoreObject s3
sagemaker:* sagemaker
sagemaker:* sagemaker
sagemaker:AddTags sagemaker
sagemaker:CreateApp sagemaker
sagemaker:CreateApp sagemaker
sagemaker:CreateApp sagemaker
sagemaker:CreatePresignedDomainUrl sagemaker
sagemaker:CreatePresignedDomainUrl sagemaker
sagemaker:CreateSpace sagemaker
sagemaker:CreateSpace sagemaker
sagemaker:CreateUserProfile sagemaker
sagemaker:DeleteApp sagemaker
sagemaker:DeleteApp sagemaker
sagemaker:DeleteApp sagemaker
sagemaker:DeleteSpace sagemaker
sagemaker:DeleteSpace sagemaker
sagemaker:DescribeApp sagemaker
sagemaker:DescribeDomain sagemaker
sagemaker:DescribeSpace sagemaker
sagemaker:DescribeUserProfile sagemaker
sagemaker:DescribeUserProfile sagemaker
sagemaker:ListApps sagemaker
sagemaker:ListDomains sagemaker
sagemaker:ListSpaces sagemaker
sagemaker:ListTags sagemaker
sagemaker:ListUserProfiles sagemaker
sagemaker:UpdateSpace sagemaker
sagemaker:UpdateSpace sagemaker
sagemaker:UpdateUserProfile sagemaker
sagemaker-geospatial:* sagemaker-geospatial
secretsmanager:CreateSecret secretsmanager
secretsmanager:CreateSecret secretsmanager
secretsmanager:DescribeSecret secretsmanager
secretsmanager:GetSecretValue secretsmanager
secretsmanager:ListSecrets secretsmanager
secretsmanager:PutResourcePolicy secretsmanager
secretsmanager:TagResource secretsmanager
servicecatalog:Describe* servicecatalog
servicecatalog:List* servicecatalog
servicecatalog:ProvisionProduct servicecatalog
servicecatalog:ScanProvisionedProducts servicecatalog
servicecatalog:SearchProducts servicecatalog
servicecatalog:SearchProvisionedProducts servicecatalog
servicecatalog:TerminateProvisionedProduct servicecatalog
servicecatalog:UpdateProvisionedProduct servicecatalog
sns:CreateTopic sns
sns:ListTopics sns
sns:Publish sns
sns:Subscribe sns
sqlworkbench:* sqlworkbench
sso:AssociateProfile sso
sso:CreateApplicationAssignment sso
states:DescribeExecution states
states:GetExecutionHistory states
states:StartExecution states
states:StopExecution states
states:UpdateStateMachine states
tag:GetResources tag