Add permissions to your Amazon SageMaker Studio account
In this tutorial, learn how to configure your Amazon SageMaker Studio account with permissions required to access SageMaker APIs and features.
What you will learn
In this guide, you will:
- Attach two AWS IAM policies, AmazonSageMakerFullAccess and AWSCloudFormationFullAccess, to your Amazon SageMaker Studio account to enable access to SageMaker APIs and features.
Before starting this guide, you will need:
- An AWS account: If you don't already have an account, follow the Setting Up Your Environment getting started guide for a quick overview.
- An Amazon SageMaker Studio domain and user: If you don't already have a SageMaker Studio domain, see Onboard to Amazon SageMaker Domain in the Amazon SageMaker developer guide.
In the SageMaker Studio domain page, click on the domain and then under the Users section, select your SageMaker Studio user name
In the User Details page, under the Details pane, Execution role, highlight and copy only the text after arn:aws:iam::<your-account-id>:role/.
Step 1: User Details can be found in the Domains tab now.
The following can also be done: SageMaker Domains-> Users and copy the execution role
Step 2: If role is not found in IAM Roles, it must be created with that name found in step 1
In the SageMaker Studio Domain page, under the Users section, select your SageMaker Studio user name.
Congratulations! You have finished the Add permissions to your Amazon SageMaker Studio account tutorial.
In this tutorial, you attached two AWS IAM policies to your SageMaker Studio account to provide your account access to SageMaker APIs and features.
If you came to this page by choosing a link on another tutorial, you can now go back to that tutorial and continue where you left off.