Amazon SageMaker
(sagemaker)
IAM Changes
Services
2025-09-23
2025-09-23
3 new conditions | 8 updated actions, 2 updated resources
Additions
Conditions
sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
Description:
Filters access by a current metadata key and value pair associated with the model-package resource
Type:
String
sagemaker:CurrentModelLifeCycleStage
Description:
Filters access by the current value of the Stage field in the model life cycle object associated with the model-package resource
Type:
String
sagemaker:CurrentModelLifeCycleStageStatus
Description:
Filters access by the current value of the StageStatus field in the model life cycle object associated with the model-package resource
Type:
String
Updates
Actions
AddTags
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
CreateModelPackage
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
DeleteTags
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
UpdateModelPackage
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
BatchDescribeModelPackage
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
DeleteModelPackage
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
DescribeModelPackage
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
ListTags
Conditions
+ sagemaker:CurrentModelLifeCycleStageStatus
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
Resources
model-package
Conditions
+ sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}
+ sagemaker:CurrentModelLifeCycleStage
+ sagemaker:CurrentModelLifeCycleStageStatus
image-version
Conditions
+ aws:ResourceTag/${TagKey}
+ sagemaker:ResourceTag/${TagKey}