@cloud-copilot/iam-data/data/conditionKeys/sagemaker.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by a key that is present in the request the user makes to the SageMaker service",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by a tag key and value pair",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by the list of all the tag key names associated with the resource in the request",
    "type": "ArrayOfString"
  },
  "sagemaker:acceleratortypes": {
    "key": "sagemaker:AcceleratorTypes",
    "description": "Filters access by the list of all accelerator types associated with the resource in the request",
    "type": "ArrayOfString"
  },
  "sagemaker:appnetworkaccesstype": {
    "key": "sagemaker:AppNetworkAccessType",
    "description": "Filters access by the app network access type associated with the resource in the request",
    "type": "String"
  },
  "sagemaker:customermetadataproperties/${metadatakey}": {
    "key": "sagemaker:CustomerMetadataProperties/${MetadataKey}",
    "description": "Filters access by a metadata key and value pair",
    "type": "String"
  },
  "sagemaker:customermetadatapropertiestoremove": {
    "key": "sagemaker:CustomerMetadataPropertiesToRemove",
    "description": "Filters access by the list of metadata properties associated with the model-package resource in the request",
    "type": "ArrayOfString"
  },
  "sagemaker:directgatedmodelaccess": {
    "key": "sagemaker:DirectGatedModelAccess",
    "description": "Used to deny direct access to SageMaker gated ModelReferences",
    "type": "String"
  },
  "sagemaker:directinternetaccess": {
    "key": "sagemaker:DirectInternetAccess",
    "description": "Filters access by the direct internet access associated with the resource in the request",
    "type": "String"
  },
  "sagemaker:domainid": {
    "key": "sagemaker:DomainId",
    "description": "You can use the domainId as a policy variable to filter requests from specific SageMaker Domains",
    "type": "String"
  },
  "sagemaker:domainsharingoutputkmskey": {
    "key": "sagemaker:DomainSharingOutputKmsKey",
    "description": "Filters access by the Domain sharing output KMS key associated with the resource in the request",
    "type": "ARN"
  },
  "sagemaker:enableremotedebug": {
    "key": "sagemaker:EnableRemoteDebug",
    "description": "Filters access by the remote debug config in the request",
    "type": "Bool"
  },
  "sagemaker:featuregroupdisablegluetablecreation": {
    "key": "sagemaker:FeatureGroupDisableGlueTableCreation",
    "description": "Filters access by the DisableGlueTableCreation flag associated with the feature group resource in the request",
    "type": "Bool"
  },
  "sagemaker:featuregroupenableonlinestore": {
    "key": "sagemaker:FeatureGroupEnableOnlineStore",
    "description": "Filters access by the EnableOnlineStore flag associated with feature group in the request",
    "type": "Bool"
  },
  "sagemaker:featuregroupofflinestoreconfig": {
    "key": "sagemaker:FeatureGroupOfflineStoreConfig",
    "description": "Filters access by the presence of an OfflineStoreConfig in the feature group resource in the request. This access filter only supports the null-conditional operator",
    "type": "Bool"
  },
  "sagemaker:featuregroupofflinestorekmskey": {
    "key": "sagemaker:FeatureGroupOfflineStoreKmsKey",
    "description": "Filters access by the offline store kms key associated with the feature group resource in the request",
    "type": "ARN"
  },
  "sagemaker:featuregroupofflinestores3uri": {
    "key": "sagemaker:FeatureGroupOfflineStoreS3Uri",
    "description": "Filters access by the offline store s3 uri associated with the feature group resource in the request",
    "type": "String"
  },
  "sagemaker:featuregrouponlinestorekmskey": {
    "key": "sagemaker:FeatureGroupOnlineStoreKmsKey",
    "description": "Filters access by the online store kms key associated with the feature group resource in the request",
    "type": "ARN"
  },
  "sagemaker:filesystemaccessmode": {
    "key": "sagemaker:FileSystemAccessMode",
    "description": "Filters access by a file system access mode associated with the resource in the request",
    "type": "String"
  },
  "sagemaker:filesystemdirectorypath": {
    "key": "sagemaker:FileSystemDirectoryPath",
    "description": "Filters access by a file system directory path associated with the resource in the request",
    "type": "String"
  },
  "sagemaker:filesystemid": {
    "key": "sagemaker:FileSystemId",
    "description": "Filters access by a file system ID associated with the resource in the request",
    "type": "String"
  },
  "sagemaker:filesystemtype": {
    "key": "sagemaker:FileSystemType",
    "description": "Filters access by a file system type associated with the resource in the request",
    "type": "String"
  },
  "sagemaker:homeefsfilesystemkmskey": {
    "key": "sagemaker:HomeEfsFileSystemKmsKey",
    "description": "Filters access by a key that is present in the request the user makes to the SageMaker service. This key is deprecated. It has been replaced by sagemaker:VolumeKmsKey",
    "type": "ARN"
  },
  "sagemaker:imagearns": {
    "key": "sagemaker:ImageArns",
    "description": "Filters access by the list of all image arns associated with the resource in the request",
    "type": "ArrayOfARN"
  },
  "sagemaker:imageversionarns": {
    "key": "sagemaker:ImageVersionArns",
    "description": "Filters access by the list of all image version arns associated with the resource in the request",
    "type": "ArrayOfARN"
  },
  "sagemaker:instancetypes": {
    "key": "sagemaker:InstanceTypes",
    "description": "Filters access by the list of all instance types associated with the resource in the request",
    "type": "ArrayOfString"
  },
  "sagemaker:intercontainertrafficencryption": {
    "key": "sagemaker:InterContainerTrafficEncryption",
    "description": "Filters access by the inter container traffic encryption associated with the resource in the request",
    "type": "Bool"
  },
  "sagemaker:keepaliveperiod": {
    "key": "sagemaker:KeepAlivePeriod",
    "description": "Filters access by the keep-alive period associated with the resource in the request",
    "type": "Numeric"
  },
  "sagemaker:maxruntimeinseconds": {
    "key": "sagemaker:MaxRuntimeInSeconds",
    "description": "Filters access by the max runtime in seconds associated with the resource in the request",
    "type": "Numeric"
  },
  "sagemaker:minimuminstancemetadataserviceversion": {
    "key": "sagemaker:MinimumInstanceMetadataServiceVersion",
    "description": "Filters access by the minimum instance metadata service version used by the resource in the request",
    "type": "String"
  },
  "sagemaker:modelapprovalstatus": {
    "key": "sagemaker:ModelApprovalStatus",
    "description": "Filters access by the model approval status with the model-package in the request",
    "type": "String"
  },
  "sagemaker:modelarn": {
    "key": "sagemaker:ModelArn",
    "description": "Filters access by the model arn associated with the resource in the request",
    "type": "ARN"
  },
  "sagemaker:modellifecycle:stage": {
    "key": "sagemaker:ModelLifeCycle:Stage",
    "description": "Filters access by stage field in the model life cycle object associated with the model-package resource in the request",
    "type": "String"
  },
  "sagemaker:modellifecycle:stagestatus": {
    "key": "sagemaker:ModelLifeCycle:StageStatus",
    "description": "Filters access by stageStatus field in the model life cycle object associated with the model-package resource in the request",
    "type": "String"
  },
  "sagemaker:networkisolation": {
    "key": "sagemaker:NetworkIsolation",
    "description": "Filters access by the network isolation associated with the resource in the request",
    "type": "Bool"
  },
  "sagemaker:outputkmskey": {
    "key": "sagemaker:OutputKmsKey",
    "description": "Filters access by the output kms key associated with the resource in the request",
    "type": "ARN"
  },
  "sagemaker:owneruserprofilearn": {
    "key": "sagemaker:OwnerUserProfileArn",
    "description": "Filters access by the OwnerUserProfile arn associated with the space in the request",
    "type": "ARN"
  },
  "sagemaker:resourcetag/": {
    "key": "sagemaker:ResourceTag/",
    "description": "Filters access by the preface string for a tag key and value pair attached to a resource",
    "type": "String"
  },
  "sagemaker:resourcetag/${tagkey}": {
    "key": "sagemaker:ResourceTag/${TagKey}",
    "description": "Filters access by a tag key and value pair",
    "type": "String"
  },
  "sagemaker:rootaccess": {
    "key": "sagemaker:RootAccess",
    "description": "Filters access by the root access associated with the resource in the request",
    "type": "String"
  },
  "sagemaker:searchvisibilitycondition/${filterkey}": {
    "key": "sagemaker:SearchVisibilityCondition/${FilterKey}",
    "description": "Limits the results of your search request to the resources that you can access. ${FilterKey} is a key that the VisibilityConditions configuration presents in the Search request",
    "type": "String"
  },
  "sagemaker:serverlessmaxconcurrency": {
    "key": "sagemaker:ServerlessMaxConcurrency",
    "description": "Filters access by limiting maximum concurrency used for Serverless inference in the request",
    "type": "Numeric"
  },
  "sagemaker:serverlessmemorysize": {
    "key": "sagemaker:ServerlessMemorySize",
    "description": "Filters access by limiting memory size used for Serverless inference in the request",
    "type": "Numeric"
  },
  "sagemaker:spacesharingtype": {
    "key": "sagemaker:SpaceSharingType",
    "description": "Filters access by the sharing type associated with the space in the request",
    "type": "String"
  },
  "sagemaker:taggingaction": {
    "key": "sagemaker:TaggingAction",
    "description": "Filters access by the API actions to which a user can apply tags. Uses the name of the API operation that creates a taggable resource to filter access",
    "type": "String"
  },
  "sagemaker:targetmodel": {
    "key": "sagemaker:TargetModel",
    "description": "Filters access by the target model associated with the Multi-Model Endpoint in the request",
    "type": "String"
  },
  "sagemaker:userprofilename": {
    "key": "sagemaker:UserProfileName",
    "description": "You can use the UserProfileName as a policy variable to filter requests from specific user profiles within a SageMaker Domain. This context key is not applicable to user profiles within shared spaces",
    "type": "String"
  },
  "sagemaker:volumekmskey": {
    "key": "sagemaker:VolumeKmsKey",
    "description": "Filters access by the volume kms key associated with the resource in the request",
    "type": "ARN"
  },
  "sagemaker:vpcsecuritygroupids": {
    "key": "sagemaker:VpcSecurityGroupIds",
    "description": "Filters access by the list of all VPC security group ids associated with the resource in the request",
    "type": "ArrayOfString"
  },
  "sagemaker:vpcsubnets": {
    "key": "sagemaker:VpcSubnets",
    "description": "Filters access by the list of all VPC subnets associated with the resource in the request",
    "type": "ArrayOfString"
  },
  "sagemaker:workteamarn": {
    "key": "sagemaker:WorkteamArn",
    "description": "Filters access by the workteam arn associated to the request",
    "type": "ARN"
  },
  "sagemaker:workteamtype": {
    "key": "sagemaker:WorkteamType",
    "description": "Filters access by the workteam type associated to the request. This can be public-crowd, private-crowd or vendor-crowd",
    "type": "String"
  }
}