Amazon SageMaker (sagemaker)

2025-07-16

6 new actions, 2 new conditions | 8 updated actions, 2 updated resources

Additions

    Actions
  • CreateHubContentPresignedUrls
    • Description:  Grants permission to generate S3 presigned URLs with GetObject permission for accessing model artifacts
    • Access:  Read
    • Resources: 

      Name: hub

      Required: Yes

      Name: hub-content

      Required: Yes

  • DescribeClusterInference
    • Description:  Grants permission to get information about the inference operator for a SageMaker HyperPod cluster
    • Access:  Read
    • Resources: 

      Name: cluster

      Required: Yes

  • ListPipelineVersions
    • Description:  Grants permission to list versions of a pipeline
    • Access:  List
    • Resources: 

      Name: pipeline

      Required: Yes

  • StartSession
    • Description:  Grants permission to start a remote session for a SageMaker space
    • Access:  Write
    • Resources: 

      Name: space

      Required: Yes

  • UpdateClusterInference
    • Description:  Grants permission to update the inference operator for a SageMaker HyperPod cluster
    • Access:  Write
    • Resources: 

      Name: cluster

      Required: Yes

    • Dependents: 

      eks:AssociateAccessPolicy

      eks:DescribeCluster

      eks:ListAssociatedAccessPolicies

      iam:PassRole

      sagemaker:DescribeCluster
  • UpdatePipelineVersion
    • Description:  Grants permission to update a pipeline version
    • Access:  Write
    • Resources: 

      Name: pipeline

      Required: Yes

    • Conditions: 

      sagemaker:PipelineVersionId
    Conditions
  • sagemaker:PipelineVersionId
    • Description:  Filters access to specific version IDs of a Sagemaker pipeline
    • Type:  String
  • sagemaker:RemoteAccess
    • Description:  Filters access by the remote access flag associated with the space in the request
    • Type:  String

Updates