Policy: AmazonSageMakerModelRegistryFullAccess ARN: arn:aws:iam::aws:policy/AmazonSageMakerModelRegistryFullAccess Allowed Actions Actions Services ecr:BatchGetImage ecr ecr:DescribeImages ecr iam:PassRole iam kms:CreateGrant kms kms:Decrypt kms kms:DescribeKey kms kms:GenerateDataKey kms resource-groups:CreateGroup resource-groups resource-groups:DeleteGroup resource-groups resource-groups:GetGroupQuery resource-groups resource-groups:ListGroupResources resource-groups resource-groups:Tag resource-groups s3:GetObject s3 s3:ListAllMyBuckets s3 s3:ListBucket s3 sagemaker:AddTags sagemaker sagemaker:CreateEndpoint sagemaker sagemaker:CreateEndpointConfig sagemaker sagemaker:CreateInferenceRecommendationsJob sagemaker sagemaker:CreateModel sagemaker sagemaker:CreateModelPackage sagemaker sagemaker:CreateModelPackageGroup sagemaker sagemaker:DeleteModelPackage sagemaker sagemaker:DeleteModelPackageGroup sagemaker sagemaker:DeleteTags sagemaker sagemaker:DescribeAction sagemaker sagemaker:DescribeInferenceRecommendationsJob sagemaker sagemaker:DescribeModelPackage sagemaker sagemaker:DescribeModelPackageGroup sagemaker sagemaker:DescribePipeline sagemaker sagemaker:DescribePipelineExecution sagemaker sagemaker:GetSearchSuggestions sagemaker sagemaker:ListArtifacts sagemaker sagemaker:ListAssociations sagemaker sagemaker:ListModelMetadata sagemaker sagemaker:ListModelPackages sagemaker sagemaker:Search sagemaker sagemaker:UpdateModelPackage sagemaker tag:GetResources tag