Policy: AmazonSageMakerNotebooksServiceRolePolicy ARN: arn:aws:iam::aws:policy/aws-service-role/AmazonSageMakerNotebooksServiceRolePolicy Allowed Actions Actions Services ec2:AuthorizeSecurityGroupEgress ec2 ec2:AuthorizeSecurityGroupIngress ec2 ec2:CreateNetworkInterface ec2 ec2:CreateNetworkInterfacePermission ec2 ec2:CreateSecurityGroup ec2 ec2:CreateTags ec2 ec2:DeleteNetworkInterface ec2 ec2:DeleteNetworkInterfacePermission ec2 ec2:DeleteSecurityGroup ec2 ec2:DescribeDhcpOptions ec2 ec2:DescribeNetworkInterfaces ec2 ec2:DescribeSecurityGroups ec2 ec2:DescribeSubnets ec2 ec2:DescribeVpcs ec2 ec2:ModifyNetworkInterfaceAttribute ec2 ec2:RevokeSecurityGroupEgress ec2 ec2:RevokeSecurityGroupIngress ec2 elasticfilesystem:CreateAccessPoint elasticfilesystem elasticfilesystem:CreateFileSystem elasticfilesystem elasticfilesystem:CreateMountTarget elasticfilesystem elasticfilesystem:DeleteAccessPoint elasticfilesystem elasticfilesystem:DeleteFileSystem elasticfilesystem elasticfilesystem:DeleteMountTarget elasticfilesystem elasticfilesystem:DescribeAccessPoints elasticfilesystem elasticfilesystem:DescribeFileSystems elasticfilesystem elasticfilesystem:DescribeMountTargets elasticfilesystem elasticfilesystem:TagResource elasticfilesystem fsx:DescribeFileSystems fsx sagemaker:AddTags sagemaker sagemaker:CreateSpace sagemaker sagemaker:CreateUserProfile sagemaker sagemaker:DeleteApp sagemaker sagemaker:DeleteSpace sagemaker sagemaker:DescribeSpace sagemaker sagemaker:DescribeUserProfile sagemaker sagemaker:ListTags sagemaker sso:CreateManagedApplicationInstance sso sso:DeleteManagedApplicationInstance sso sso:GetManagedApplicationInstance sso