Skip to content

Policy: SageMakerStudioProjectProvisioningRolePolicy

ARN: arn:aws:iam::aws:policy/service-role/SageMakerStudioProjectProvisioningRolePolicy

Allowed Actions

Actions Services
airflow:CreateEnvironment airflow
airflow:DeleteEnvironment airflow
airflow:GetEnvironment airflow
airflow:TagResource airflow
airflow:UpdateEnvironment airflow
aoss:BatchGetCollection aoss
aoss:CreateAccessPolicy aoss
aoss:CreateCollection aoss
aoss:CreateSecurityPolicy aoss
aoss:DeleteAccessPolicy aoss
aoss:DeleteCollection aoss
aoss:DeleteSecurityPolicy aoss
aoss:GetAccessPolicy aoss
aoss:GetSecurityPolicy aoss
aoss:TagResource aoss
aoss:UpdateAccessPolicy aoss
aoss:UpdateCollection aoss
aoss:UpdateSecurityPolicy aoss
athena:CreateDataCatalog athena
athena:CreateWorkGroup athena
athena:DeleteDataCatalog athena
athena:DeleteWorkGroup athena
athena:GetDataCatalog athena
athena:GetWorkGroup athena
athena:TagResource athena
athena:TagResource athena
athena:UpdateDataCatalog athena
bedrock:AssociateAgentKnowledgeBase bedrock
bedrock:BatchDeleteEvaluationJob bedrock
bedrock:CreateAgent bedrock
bedrock:CreateAgentActionGroup bedrock
bedrock:CreateAgentAlias bedrock
bedrock:CreateDataSource bedrock
bedrock:CreateFlow bedrock
bedrock:CreateFlowAlias bedrock
bedrock:CreateFlowVersion bedrock
bedrock:CreateGuardrail bedrock
bedrock:CreateGuardrailVersion bedrock
bedrock:CreateKnowledgeBase bedrock
bedrock:CreatePrompt bedrock
bedrock:CreatePromptVersion bedrock
bedrock:DeleteAgent bedrock
bedrock:DeleteAgentActionGroup bedrock
bedrock:DeleteAgentAlias bedrock
bedrock:DeleteDataSource bedrock
bedrock:DeleteFlow bedrock
bedrock:DeleteFlowAlias bedrock
bedrock:DeleteFlowVersion bedrock
bedrock:DeleteGuardrail bedrock
bedrock:DeleteKnowledgeBase bedrock
bedrock:DeletePrompt bedrock
bedrock:DisassociateAgentKnowledgeBase bedrock
bedrock:GetAgent bedrock
bedrock:GetAgentActionGroup bedrock
bedrock:GetAgentAlias bedrock
bedrock:GetAgentKnowledgeBase bedrock
bedrock:GetDataSource bedrock
bedrock:GetFlow bedrock
bedrock:GetFlowAlias bedrock
bedrock:GetFlowAlias bedrock
bedrock:GetFlowVersion bedrock
bedrock:GetGuardrail bedrock
bedrock:GetIngestionJob bedrock
bedrock:GetKnowledgeBase bedrock
bedrock:GetPrompt bedrock
bedrock:ListAgentActionGroups bedrock
bedrock:ListAgentAliases bedrock
bedrock:ListAgentKnowledgeBases bedrock
bedrock:ListDataSources bedrock
bedrock:ListEvaluationJobs bedrock
bedrock:ListFlowAliases bedrock
bedrock:ListFlowVersions bedrock
bedrock:ListIngestionJobs bedrock
bedrock:ListTagsForResource bedrock
bedrock:PrepareAgent bedrock
bedrock:PrepareFlow bedrock
bedrock:StartIngestionJob bedrock
bedrock:StopIngestionJob bedrock
bedrock:TagResource bedrock
bedrock:TagResource bedrock
bedrock:UpdateAgent bedrock
bedrock:UpdateAgentActionGroup bedrock
bedrock:UpdateAgentAlias bedrock
bedrock:UpdateAgentKnowledgeBase bedrock
bedrock:UpdateDataSource bedrock
bedrock:UpdateFlow bedrock
bedrock:UpdateFlowAlias bedrock
bedrock:UpdateGuardrail bedrock
bedrock:UpdateKnowledgeBase bedrock
bedrock:UpdatePrompt bedrock
cloudformation:CreateChangeSet cloudformation
cloudformation:CreateStack cloudformation
cloudformation:CreateStack cloudformation
cloudformation:DeleteChangeSet cloudformation
cloudformation:DeleteStack cloudformation
cloudformation:DeleteStack cloudformation
cloudformation:DescribeStackEvents cloudformation
cloudformation:DescribeStackEvents cloudformation
cloudformation:DescribeStacks cloudformation
cloudformation:DescribeStacks cloudformation
cloudformation:DescribeStacks cloudformation
cloudformation:TagResource cloudformation
cloudformation:UpdateStack cloudformation
codecommit:CreateCommit codecommit
codecommit:CreateRepository codecommit
codecommit:DeleteRepository codecommit
codecommit:GetBranch codecommit
codecommit:GetFile codecommit
codecommit:GetRepository codecommit
codecommit:ListRepositories codecommit
codecommit:PutRepositoryTriggers codecommit
codecommit:TagResource codecommit
codecommit:UpdateRepositoryEncryptionKey codecommit
ec2:AuthorizeSecurityGroupEgress ec2
ec2:AuthorizeSecurityGroupIngress ec2
ec2:CreateNetworkInterface ec2
ec2:CreateNetworkInterface ec2
ec2:CreateNetworkInterface ec2
ec2:CreateSecurityGroup ec2
ec2:CreateTags ec2
ec2:CreateVpcEndpoint ec2
ec2:DeleteSecurityGroup ec2
ec2:DeleteSecurityGroup ec2
ec2:DescribeAccountAttributes ec2
ec2:DescribeAvailabilityZones ec2
ec2:DescribeNatGateways ec2
ec2:DescribeRouteTables ec2
ec2:DescribeSecurityGroups ec2
ec2:DescribeSubnets ec2
ec2:DescribeVpcs ec2
ec2:RevokeSecurityGroupEgress ec2
ec2:RevokeSecurityGroupIngress ec2
ec2:RevokeSecurityGroupIngress ec2
ecr:BatchCheckLayerAvailability ecr
ecr:BatchGetImage ecr
ecr:GetAuthorizationToken ecr
ecr:GetDownloadUrlForLayer ecr
elasticmapreduce:AddJobFlowSteps elasticmapreduce
elasticmapreduce:AddTags elasticmapreduce
elasticmapreduce:CreateSecurityConfiguration elasticmapreduce
elasticmapreduce:DeleteSecurityConfiguration elasticmapreduce
elasticmapreduce:DescribeCluster elasticmapreduce
elasticmapreduce:DescribeJobFlows elasticmapreduce
elasticmapreduce:ListInstanceFleets elasticmapreduce
elasticmapreduce:ModifyInstanceFleet elasticmapreduce
elasticmapreduce:RunJobFlow elasticmapreduce
elasticmapreduce:SetTerminationProtection elasticmapreduce
elasticmapreduce:TerminateJobFlows elasticmapreduce
emr-serverless:CreateApplication emr-serverless
emr-serverless:DeleteApplication emr-serverless
emr-serverless:GetApplication emr-serverless
emr-serverless:TagResource emr-serverless
emr-serverless:UpdateApplication emr-serverless
glue:CreateCatalog glue
glue:CreateConnection glue
glue:CreateConnection glue
glue:CreateDatabase glue
glue:CreateDatabase glue
glue:DeleteCatalog glue
glue:DeleteConnection glue
glue:DeleteConnection glue
glue:DeleteConnection glue
glue:DeleteDatabase glue
glue:DescribeConnectionType glue
glue:GetCatalog glue
glue:GetCatalogs glue
glue:GetConnection glue
glue:GetConnection glue
glue:GetConnections glue
glue:GetDatabase glue
glue:GetDatabase glue
glue:GetDatabase glue
glue:GetTags glue
glue:ListConnectionTypes glue
glue:PassConnection glue
glue:TagResource glue
glue:UpdateCatalog glue
glue:UpdateConnection glue
glue:UpdateConnection glue
iam:AddRoleToInstanceProfile iam
iam:AttachRolePolicy iam
iam:AttachRolePolicy iam
iam:AttachRolePolicy iam
iam:AttachRolePolicy iam
iam:AttachRolePolicy iam
iam:AttachRolePolicy iam
iam:CreateInstanceProfile iam
iam:CreatePolicy iam
iam:CreatePolicyVersion iam
iam:CreateRole iam
iam:CreateRole iam
iam:CreateRole iam
iam:CreateRole iam
iam:CreateServiceLinkedRole iam
iam:CreateServiceLinkedRole iam
iam:DeleteInstanceProfile iam
iam:DeleteInstanceProfile iam
iam:DeletePolicy iam
iam:DeletePolicyVersion iam
iam:DeleteRole iam
iam:DeleteRole iam
iam:DeleteRolePolicy iam
iam:DeleteRolePolicy iam
iam:DeleteRolePolicy iam
iam:DeleteRolePolicy iam
iam:DetachRolePolicy iam
iam:DetachRolePolicy iam
iam:DetachRolePolicy iam
iam:DetachRolePolicy iam
iam:DetachRolePolicy iam
iam:DetachRolePolicy iam
iam:GetInstanceProfile iam
iam:GetPolicy iam
iam:GetPolicyVersion iam
iam:GetRole iam
iam:GetRole iam
iam:GetRole iam
iam:GetRole iam
iam:GetRolePolicy iam
iam:ListAttachedRolePolicies iam
iam:ListAttachedRolePolicies iam
iam:ListAttachedRolePolicies iam
iam:ListInstanceProfilesForRole iam
iam:ListPolicies iam
iam:ListPolicies iam
iam:ListPolicyVersions iam
iam:ListRolePolicies iam
iam:ListRolePolicies iam
iam:PassRole iam
iam:PassRole iam
iam:PassRole iam
iam:PassRole iam
iam:PassRole iam
iam:PassRole iam
iam:PassRole iam
iam:PassRole iam
iam:PutRolePolicy iam
iam:PutRolePolicy iam
iam:RemoveRoleFromInstanceProfile iam
iam:RemoveRoleFromInstanceProfile iam
iam:TagRole iam
iam:TagRole iam
iam:TagRole iam
iam:TagRole iam
iam:TagRole iam
iam:UntagRole iam
iam:UpdateAssumeRolePolicy iam
imagebuilder:GetComponent imagebuilder
imagebuilder:GetContainerRecipe imagebuilder
kms:CreateGrant kms
kms:Decrypt kms
kms:Decrypt kms
kms:Decrypt kms
kms:Decrypt kms
kms:DescribeKey kms
kms:Encrypt kms
kms:GenerateDataKey kms
kms:GenerateDataKey kms
kms:GenerateDataKey kms
kms:ReEncryptFrom kms
kms:ReEncryptTo kms
lakeformation:BatchGrantPermissions lakeformation
lakeformation:BatchRevokePermissions lakeformation
lakeformation:DeregisterResource lakeformation
lakeformation:DescribeResource lakeformation
lakeformation:GetDataLakeSettings lakeformation
lakeformation:GrantPermissions lakeformation
lakeformation:ListPermissions lakeformation
lakeformation:ListResources lakeformation
lakeformation:PutDataLakeSettings lakeformation
lakeformation:RegisterResource lakeformation
lakeformation:RevokePermissions lakeformation
lambda:AddPermission lambda
lambda:CreateFunction lambda
lambda:CreateFunction lambda
lambda:DeleteFunction lambda
lambda:DeleteFunction lambda
lambda:GetFunction lambda
lambda:GetFunction lambda
lambda:GetFunctionConfiguration lambda
lambda:GetFunctionConfiguration lambda
lambda:GetPolicy lambda
lambda:InvokeFunction lambda
lambda:ListTags lambda
lambda:ListVersionsByFunction lambda
lambda:PublishVersion lambda
lambda:RemovePermission lambda
lambda:TagResource lambda
lambda:TagResource lambda
lambda:UpdateFunctionCode lambda
lambda:UpdateFunctionConfiguration lambda
lambda:UpdateFunctionConfiguration lambda
logs:AssociateKmsKey logs
logs:CreateLogGroup logs
logs:DeleteDataProtectionPolicy logs
logs:DeleteLogGroup logs
logs:DeleteRetentionPolicy logs
logs:DescribeLogGroups logs
logs:DisassociateKmsKey logs
logs:GetDataProtectionPolicy logs
logs:ListTagsForResource logs
logs:PutDataProtectionPolicy logs
logs:PutRetentionPolicy logs
logs:TagResource logs
redshift:AssociateDataShareConsumer redshift
redshift:AuthorizeDataShare redshift
redshift:DescribeDataShares redshift
redshift:DescribeDataSharesForConsumer redshift
redshift:GetResourcePolicy redshift
redshift:GetResourcePolicy redshift
redshift-data:DescribeStatement redshift-data
redshift-data:ExecuteStatement redshift-data
redshift-data:GetStatementResult redshift-data
redshift-serverless:CreateNamespace redshift-serverless
redshift-serverless:CreateNamespace redshift-serverless
redshift-serverless:CreateWorkgroup redshift-serverless
redshift-serverless:CreateWorkgroup redshift-serverless
redshift-serverless:DeleteNamespace redshift-serverless
redshift-serverless:DeleteWorkgroup redshift-serverless
redshift-serverless:GetCredentials redshift-serverless
redshift-serverless:GetNamespace redshift-serverless
redshift-serverless:GetWorkgroup redshift-serverless
redshift-serverless:ListNamespaces redshift-serverless
redshift-serverless:ListTagsForResource redshift-serverless
redshift-serverless:ListTagsForResource redshift-serverless
redshift-serverless:ListWorkgroups redshift-serverless
redshift-serverless:TagResource redshift-serverless
redshift-serverless:TagResource redshift-serverless
redshift-serverless:UntagResource redshift-serverless
redshift-serverless:UpdateNamespace redshift-serverless
redshift-serverless:UpdateWorkgroup redshift-serverless
s3:CreateBucket s3
s3:DeleteBucket s3
s3:GetEncryptionConfiguration s3
s3:GetObject s3
s3:GetObject s3
s3:GetObject s3
s3:GetObjectVersion s3
s3:ListBucket s3
s3:PutBucketPolicy s3
s3:PutBucketTagging s3
s3:PutBucketVersioning s3
s3:PutEncryptionConfiguration s3
s3:PutLifecycleConfiguration s3
sagemaker:AddTags sagemaker
sagemaker:AddTags sagemaker
sagemaker:CreateDomain sagemaker
sagemaker:CreateMlflowTrackingServer sagemaker
sagemaker:DeleteApp sagemaker
sagemaker:DeleteDomain sagemaker
sagemaker:DeleteMlflowTrackingServer sagemaker
sagemaker:DeleteSpace sagemaker
sagemaker:DeleteUserProfile sagemaker
sagemaker:DescribeDomain sagemaker
sagemaker:DescribeMlflowTrackingServer sagemaker
sagemaker:ListDomains sagemaker
sagemaker:UpdateDomain sagemaker
scheduler:CreateScheduleGroup scheduler
scheduler:DeleteScheduleGroup scheduler
scheduler:GetScheduleGroup scheduler
scheduler:ListTagsForResource scheduler
scheduler:TagResource scheduler
secretsmanager:CreateSecret secretsmanager
secretsmanager:CreateSecret secretsmanager
secretsmanager:CreateSecret secretsmanager
secretsmanager:DeleteResourcePolicy secretsmanager
secretsmanager:DeleteSecret secretsmanager
secretsmanager:DeleteSecret secretsmanager
secretsmanager:DeleteSecret secretsmanager
secretsmanager:DescribeSecret secretsmanager
secretsmanager:DescribeSecret secretsmanager
secretsmanager:DescribeSecret secretsmanager
secretsmanager:DescribeSecret secretsmanager
secretsmanager:GetRandomPassword secretsmanager
secretsmanager:GetResourcePolicy secretsmanager
secretsmanager:PutResourcePolicy secretsmanager
secretsmanager:RotateSecret secretsmanager
secretsmanager:TagResource secretsmanager
secretsmanager:TagResource secretsmanager
secretsmanager:TagResource secretsmanager
secretsmanager:UpdateSecret secretsmanager
secretsmanager:UpdateSecret secretsmanager
secretsmanager:UpdateSecret secretsmanager
serverlessrepo:CreateCloudFormationTemplate serverlessrepo
serverlessrepo:GetCloudFormationTemplate serverlessrepo