Policy: AmazonDataZoneSageMakerManageAccessRolePolicy ARN: arn:aws:iam::aws:policy/AmazonDataZoneSageMakerManageAccessRolePolicy Allowed Actions Actions Services ecr:DeleteRepositoryPolicy ecr ecr:GetRepositoryPolicy ecr ecr:SetRepositoryPolicy ecr kms:CreateGrant kms kms:DescribeKey kms ram:CreateResourceShare ram ram:DeleteResourceShare ram ram:GetResourceShareAssociations ram ram:GetResourceShareInvitations ram ram:GetResourceShares ram ram:TagResource ram s3:DeleteBucketPolicy s3 s3:GetBucketPolicy s3 s3:GetObject s3 s3:ListBucket s3 s3:PutBucketPolicy s3 sagemaker:AddTags sagemaker sagemaker:DeleteModelPackageGroupPolicy sagemaker sagemaker:DeleteResourcePolicy sagemaker sagemaker:DeleteTags sagemaker sagemaker:DescribeAlgorithm sagemaker sagemaker:DescribeDomain sagemaker sagemaker:DescribeFeatureGroup sagemaker sagemaker:DescribeModelPackage sagemaker sagemaker:DescribeModelPackageGroup sagemaker sagemaker:GetModelPackageGroupPolicy sagemaker sagemaker:GetResourcePolicy sagemaker sagemaker:ListModelPackages sagemaker sagemaker:ListTags sagemaker sagemaker:PutModelPackageGroupPolicy sagemaker sagemaker:PutResourcePolicy sagemaker sagemaker:Search sagemaker