Skip to content

Policy: SageMakerStudioFullAccess

ARN: arn:aws:iam::aws:policy/SageMakerStudioFullAccess

Allowed Actions

Actions Services
aoss:CreateSecurityPolicy aoss
aoss:GetSecurityPolicy aoss
aoss:ListSecurityPolicies aoss
bedrock:CreateInferenceProfile bedrock
bedrock:DeleteInferenceProfile bedrock
bedrock:GetFoundationModel bedrock
bedrock:GetFoundationModelAvailability bedrock
bedrock:GetInferenceProfile bedrock
bedrock:ListFoundationModels bedrock
bedrock:ListInferenceProfiles bedrock
bedrock:ListTagsForResource bedrock
bedrock:TagResource bedrock
codeconnections:GetConnection codeconnections
codeconnections:ListConnections codeconnections
codeconnections:ListTagsForResource codeconnections
codeconnections:TagResource codeconnections
codeconnections:UntagResource codeconnections
codewhisperer:ListProfiles codewhisperer
datazone:* datazone
ec2:DescribeSecurityGroups ec2
ec2:DescribeSubnets ec2
ec2:DescribeVpcs ec2
glue:GetDatabases glue
iam:GetPolicy iam
iam:ListRoles iam
iam:ListUsers iam
iam:PassRole iam
kms:Decrypt kms
kms:DescribeKey kms
kms:ListAliases kms
ram:AssociateResourceShare ram
ram:CreateResourceShare ram
ram:DeleteResourceShare ram
ram:DisassociateResourceShare ram
ram:GetResourceShareAssociations ram
ram:GetResourceShareInvitations ram
ram:GetResourceShares ram
ram:ListResourceSharePermissions ram
ram:RejectResourceShareInvitation ram
redshift:DescribeClusters redshift
redshift-serverless:ListWorkgroups redshift-serverless
s3:CreateBucket s3
s3:GetBucketLocation s3
s3:ListAllMyBuckets s3
s3:ListBucket s3
s3:PutBucketCORS s3
s3:PutBucketPolicy s3
s3:PutBucketVersioning s3
secretsmanager:CreateSecret secretsmanager
secretsmanager:ListSecrets secretsmanager
secretsmanager:TagResource secretsmanager
secretsmanager:TagResource secretsmanager
ssm:DeleteParameter ssm
ssm:GetParameter ssm
ssm:GetParametersByPath ssm
ssm:PutParameter ssm
sso:DescribeRegisteredRegions sso