Policy: SageMakerStudioEMRServiceRolePolicy ARN: arn:aws:iam::aws:policy/service-role/SageMakerStudioEMRServiceRolePolicy Allowed Actions Actions Services ec2:CreateFleet ec2 ec2:CreateNetworkInterface ec2 ec2:RunInstances ec2 iam:PassRole iam kms:CreateGrant kms kms:Decrypt kms kms:DescribeKey kms kms:Encrypt kms kms:GenerateDataKey kms kms:GenerateDataKeyWithoutPlaintext kms kms:ListAliases kms kms:ListGrants kms kms:ReEncryptFrom kms kms:ReEncryptTo kms kms:RevokeGrant kms