Policy: SageMakerStudioEMRInstanceRolePolicy ARN: arn:aws:iam::aws:policy/service-role/SageMakerStudioEMRInstanceRolePolicy Allowed Actions Actions Services kms:CreateGrant kms kms:Decrypt kms kms:Encrypt kms kms:GenerateDataKey kms kms:GenerateDataKeyWithoutPlaintext kms s3:GetObject s3 s3:GetObject s3 s3:GetObject s3 s3:PutObject s3 sts:AssumeRole sts sts:TagSession sts