UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,742 lines 721 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Sagemaker = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [sagemaker](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsagemaker.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Sagemaker extends shared_1.PolicyStatement { /** * Grants permission to associate a lineage entity (artifact, context, action, experiment, experiment-trial-component) to each other * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddAssociation.html */ toAddAssociation() { return this.to('AddAssociation'); } /** * Grants permission to add or overwrite one or more tags for the specified Amazon SageMaker resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifTaggingAction() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddTags.html */ toAddTags() { return this.to('AddTags'); } /** * Grants permission to associate a trial component with a trial * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AssociateTrialComponent.html */ toAssociateTrialComponent() { return this.to('AssociateTrialComponent'); } /** * Grants permission to batch delete SageMaker HyperPod cluster nodes * * Access Level: Write * * Dependent actions: * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDeleteClusterNodes.html */ toBatchDeleteClusterNodes() { return this.to('BatchDeleteClusterNodes'); } /** * Grants permission to describe one or more ModelPackages * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDescribeModelPackage.html */ toBatchDescribeModelPackage() { return this.to('BatchDescribeModelPackage'); } /** * Grants permission to retrieve metrics associated with SageMaker Resources such as Training Jobs or Trial Components * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchGetMetrics() { return this.to('BatchGetMetrics'); } /** * Grants permission to get a batch of records from one or more feature groups * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_BatchGetRecord.html */ toBatchGetRecord() { return this.to('BatchGetRecord'); } /** * Grants permission to publish metrics associated with a SageMaker Resource such as a Training Job or Trial Component * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchPutMetrics() { return this.to('BatchPutMetrics'); } /** * Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/partner-apps-onboard.html */ toCallPartnerAppApi() { return this.to('CallPartnerAppApi'); } /** * Grants permission to create an action * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAction.html */ toCreateAction() { return this.to('CreateAction'); } /** * Grants permission to create an algorithm * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAlgorithm.html */ toCreateAlgorithm() { return this.to('CreateAlgorithm'); } /** * Grants permission to create an App for a SageMaker UserProfile or Space * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifImageArns() * - .ifImageVersionArns() * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateApp.html */ toCreateApp() { return this.to('CreateApp'); } /** * Grants permission to create an AppImageConfig * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAppImageConfig.html */ toCreateAppImageConfig() { return this.to('CreateAppImageConfig'); } /** * Grants permission to create an artifact * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateArtifact.html */ toCreateArtifact() { return this.to('CreateArtifact'); } /** * Grants permission to create an AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJob.html */ toCreateAutoMLJob() { return this.to('CreateAutoMLJob'); } /** * Grants permission to create a V2 AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJobV2.html */ toCreateAutoMLJobV2() { return this.to('CreateAutoMLJobV2'); } /** * Grants permission to create a SageMaker HyperPod cluster * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:CreateAccessEntry * - eks:DeleteAccessEntry * - eks:DescribeAccessEntry * - eks:DescribeCluster * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCluster.html */ toCreateCluster() { return this.to('CreateCluster'); } /** * Grants permission to create a cluster scheduler config * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateClusterSchedulerConfig.html */ toCreateClusterSchedulerConfig() { return this.to('CreateClusterSchedulerConfig'); } /** * Grants permission to create a CodeRepository * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCodeRepository.html */ toCreateCodeRepository() { return this.to('CreateCodeRepository'); } /** * Grants permission to create a compilation job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCompilationJob.html */ toCreateCompilationJob() { return this.to('CreateCompilationJob'); } /** * Grants permission to create a compute quota * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateComputeQuota.html */ toCreateComputeQuota() { return this.to('CreateComputeQuota'); } /** * Grants permission to create a context * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateContext.html */ toCreateContext() { return this.to('CreateContext'); } /** * Grants permission to create a data quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDataQualityJobDefinition.html */ toCreateDataQualityJobDefinition() { return this.to('CreateDataQualityJobDefinition'); } /** * Grants permission to create a device fleet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDeviceFleet.html */ toCreateDeviceFleet() { return this.to('CreateDeviceFleet'); } /** * Grants permission to create a Domain for SageMaker Studio * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAppNetworkAccessType() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDomainSharingOutputKmsKey() * - .ifVolumeKmsKey() * - .ifImageArns() * - .ifImageVersionArns() * * Dependent actions: * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDomain.html */ toCreateDomain() { return this.to('CreateDomain'); } /** * Grants permission to create an edge deployment plan * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentPlan.html */ toCreateEdgeDeploymentPlan() { return this.to('CreateEdgeDeploymentPlan'); } /** * Grants permission to create an edge deployment stage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentStage.html */ toCreateEdgeDeploymentStage() { return this.to('CreateEdgeDeploymentStage'); } /** * Grants permission to create an edge packaging job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgePackagingJob.html */ toCreateEdgePackagingJob() { return this.to('CreateEdgePackagingJob'); } /** * Grants permission to create an endpoint using the endpoint configuration specified in the request * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpoint.html */ toCreateEndpoint() { return this.to('CreateEndpoint'); } /** * Grants permission to create an endpoint configuration that can be deployed using Amazon SageMaker hosting services * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifInstanceTypes() * - .ifModelArn() * - .ifVolumeKmsKey() * - .ifServerlessMaxConcurrency() * - .ifServerlessMemorySize() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpointConfig.html */ toCreateEndpointConfig() { return this.to('CreateEndpointConfig'); } /** * Grants permission to create an experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateExperiment.html */ toCreateExperiment() { return this.to('CreateExperiment'); } /** * Grants permission to create a feature group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFeatureGroupOnlineStoreKmsKey() * - .ifFeatureGroupOfflineStoreKmsKey() * - .ifFeatureGroupOfflineStoreS3Uri() * - .ifFeatureGroupEnableOnlineStore() * - .ifFeatureGroupOfflineStoreConfig() * - .ifFeatureGroupDisableGlueTableCreation() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFeatureGroup.html */ toCreateFeatureGroup() { return this.to('CreateFeatureGroup'); } /** * Grants permission to create a flow definition, which defines settings for a human workflow * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFlowDefinition.html */ toCreateFlowDefinition() { return this.to('CreateFlowDefinition'); } /** * Grants permission to create a hub * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHub.html */ toCreateHub() { return this.to('CreateHub'); } /** * Grants permission to create hub content reference * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentReference.html */ toCreateHubContentReference() { return this.to('CreateHubContentReference'); } /** * Grants permission to define the settings you will use for the human review workflow user interface * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHumanTaskUi.html */ toCreateHumanTaskUi() { return this.to('CreateHumanTaskUi'); } /** * Grants permission to create a hyper parameter tuning job that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFileSystemAccessMode() * - .ifFileSystemDirectoryPath() * - .ifFileSystemId() * - .ifFileSystemType() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHyperParameterTuningJob.html */ toCreateHyperParameterTuningJob() { return this.to('CreateHyperParameterTuningJob'); } /** * Grants permission to create a SageMaker Image * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImage.html */ toCreateImage() { return this.to('CreateImage'); } /** * Grants permission to create a SageMaker ImageVersion * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImageVersion.html */ toCreateImageVersion() { return this.to('CreateImageVersion'); } /** * Grants permission to create an inference component on an endpoint * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelArn() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceComponent.html */ toCreateInferenceComponent() { return this.to('CreateInferenceComponent'); } /** * Grants permission to create an inference experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceExperiment.html */ toCreateInferenceExperiment() { return this.to('CreateInferenceExperiment'); } /** * Grants permission to create an inference recommendations job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceRecommendationsJob.html */ toCreateInferenceRecommendationsJob() { return this.to('CreateInferenceRecommendationsJob'); } /** * Grants permission to start a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifVolumeKmsKey() * - .ifOutputKmsKey() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateLabelingJob.html */ toCreateLabelingJob() { return this.to('CreateLabelingJob'); } /** * Grants permission to create a lineage group policy * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/Welcome.html */ toCreateLineageGroupPolicy() { return this.to('CreateLineageGroupPolicy'); } /** * Grants permission to create an MLflow tracking server * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMlflowTrackingServer.html */ toCreateMlflowTrackingServer() { return this.to('CreateMlflowTrackingServer'); } /** * Grants permission to create a model in Amazon SageMaker. In the request, you specify a name for the model and describe one or more containers * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDirectGatedModelAccess() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModel.html */ toCreateModel() { return this.to('CreateModel'); } /** * Grants permission to create a model bias job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelBiasJobDefinition.html */ toCreateModelBiasJobDefinition() { return this.to('CreateModelBiasJobDefinition'); } /** * Grants permission to create a model card * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCard.html */ toCreateModelCard() { return this.to('CreateModelCard'); } /** * Grants permission to create an export job for a model card * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCardExportJob.html */ toCreateModelCardExportJob() { return this.to('CreateModelCardExportJob'); } /** * Grants permission to create a model explainability job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelExplainabilityJobDefinition.html */ toCreateModelExplainabilityJobDefinition() { return this.to('CreateModelExplainabilityJobDefinition'); } /** * Grants permission to create a ModelPackage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelApprovalStatus() * - .ifCustomerMetadataProperties() * - .ifModelLifeCycle() * - .ifModelLifeCycle() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackage.html */ toCreateModelPackage() { return this.to('CreateModelPackage'); } /** * Grants permission to create a ModelPackageGroup * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackageGroup.html */ toCreateModelPackageGroup() { return this.to('CreateModelPackageGroup'); } /** * Grants permission to create a model quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelQualityJobDefinition.html */ toCreateModelQualityJobDefinition() { return this.to('CreateModelQualityJobDefinition'); } /** * Grants permission to create a monitoring schedule * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMonitoringSchedule.html */ toCreateMonitoringSchedule() { return this.to('CreateMonitoringSchedule'); } /** * Grants permission to create an Amazon SageMaker notebook instance. A notebook instance is an Amazon EC2 instance running on a Jupyter Notebook * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifDirectInternetAccess() * - .ifInstanceTypes() * - .ifMinimumInstanceMetadataServiceVersion() * - .ifRootAccess() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstance.html */ toCreateNotebookInstance() { return this.to('CreateNotebookInstance'); } /** * Grants permission to create a notebook instance lifecycle configuration that can be deployed using Amazon SageMaker * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstanceLifecycleConfig.html */ toCreateNotebookInstanceLifecycleConfig() { return this.to('CreateNotebookInstanceLifecycleConfig'); } /** * Grants permission to create an optimization job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateOptimizationJob.html */ toCreateOptimizationJob() { return this.to('CreateOptimizationJob'); } /** * Grants permission to create an Amazon SageMaker Partner AI App * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerApp.html */ toCreatePartnerApp() { return this.to('CreatePartnerApp'); } /** * Grants permission to return a URL that you can use from your browser to connect to the Amazon SageMaker Partner AI App * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerAppPresignedUrl.html */ toCreatePartnerAppPresignedUrl() { return this.to('CreatePartnerAppPresignedUrl'); } /** * Grants permission to create a pipeline * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePipeline.html */ toCreatePipeline() { return this.to('CreatePipeline'); } /** * Grants permission to return a URL that you can use from your browser to connect to the Domain as a specified UserProfile when AuthMode is 'IAM' * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedDomainUrl.html */ toCreatePresignedDomainUrl() { return this.to('CreatePresignedDomainUrl'); } /** * Grants permission to return a URL that you can use from your browser to connect to the MLflow tracking server * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedMlflowTrackingServerUrl.html */ toCreatePresignedMlflowTrackingServerUrl() { return this.to('CreatePresignedMlflowTrackingServerUrl'); } /** * Grants permission to create a URL that you can use from your browser to connect to the Notebook Instance * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedNotebookInstanceUrl.html */ toCreatePresignedNotebookInstanceUrl() { return this.to('CreatePresignedNotebookInstanceUrl'); } /** * Grants permission to start a processing job. After processing completes, Amazon SageMaker saves the resulting artifacts and other optional output to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifInterContainerTrafficEncryption() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProcessingJob.html */ toCreateProcessingJob() { return this.to('CreateProcessingJob'); } /** * Grants permission to create a Project * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProject.html */ toCreateProject() { return this.to('CreateProject'); } /** * Grants permission to create a reserved capacity * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateReservedCapacity.html */ toCreateReservedCapacity() { return this.to('CreateReservedCapacity'); } /** * Grants permission to create a shared model in a SageMaker Studio application * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/canvas-collaborate-permissions.html */ toCreateSharedModel() { return this.to('CreateSharedModel'); } /** * Grants permission to create a Space for a SageMaker Domain * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifImageArns() * - .ifImageVersionArns() * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateSpace.html */ toCreateSpace() { return this.to('CreateSpace'); } /** * Grants permission to create a Studio Lifecycle Configuration that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateStudioLifecycleConfig.html */ toCreateStudioLifecycleConfig() { return this.to('CreateStudioLifecycleConfig'); } /** * Grants permission to start a model training job. After training completes, Amazon SageMaker saves the resulting model artifacts and other optional output to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFileSystemAccessMode() * - .ifFileSystemDirectoryPath() * - .ifFileSystemId() * - .ifFileSystemType() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifKeepAlivePeriod() * - .ifEnableRemoteDebug() * - .ifDirectGatedModelAccess() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrainingJob.html */ toCreateTrainingJob() { return this.to('CreateTrainingJob'); } /** * Grants permission to create a training plan that allocates resources for scheduling workloads within a specified time range * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * - sagemaker:CreateReservedCapacity * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrainingPlan.html */ toCreateTrainingPlan() { return this.to('CreateTrainingPlan'); } /** * Grants permission to start a transform job. After the results are obtained, Amazon SageMaker saves them to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifModelArn() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTransformJob.html */ toCreateTransformJob() { return this.to('CreateTransformJob'); } /** * Grants permission to create a trial * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrial.html */ toCreateTrial() { return this.to('CreateTrial'); } /** * Grants permission to create a trial component * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrialComponent.html */ toCreateTrialComponent() { return this.to('CreateTrialComponent'); } /** * Grants permission to create a UserProfile for a SageMaker Domain * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifVpcSecurityGroupIds() * - .ifInstanceTypes() * - .ifDomainSharingOutputKmsKey() * - .ifImageArns() * - .ifImageVersionArns() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateUserProfile.html */ toCreateUserProfile() { return this.to('CreateUserProfile'); } /** * Grants permission to create a workforce * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateWorkforce.html */ toCreateWorkforce() { return this.to('CreateWorkforce'); } /** * Grants permission to create a workteam * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateWorkteam.html */ toCreateWorkteam() { return this.to('CreateWorkteam'); } /** * Grants permission to delete an action * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAction.html */ toDeleteAction() { return this.to('DeleteAction'); } /** * Grants permission to delete an algorithm * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAlgorithm.html */ toDeleteAlgorithm() { return this.to('DeleteAlgorithm'); } /** * Grants permission to delete an App * * Access Level: Write * * Possible conditions: * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteApp.html */ toDeleteApp() { return this.to('DeleteApp'); } /** * Grants permission to delete an AppImageConfig * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAppImageConfig.html */ toDeleteAppImageConfig() { return this.to('DeleteAppImageConfig'); } /** * Grants permission to delete an artifact * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteArtifact.html */ toDeleteArtifact() { return this.to('DeleteArtifact'); } /** * Grants permission to delete the association from a lineage entity (artifact, context, action, experiment, experiment-trial-component) to another * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAssociation.html */ toDeleteAssociation() { return this.to('DeleteAssociation'); } /** * Grants permission to delete a SageMaker HyperPod cluster * * Access Level: Write * * Dependent actions: * - eks:DeleteAccessEntry * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCluster.html */ toDeleteCluster() { return this.to('DeleteCluster'); } /** * Grants permission to delete a cluster scheduler config * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteClusterSchedulerConfig.html */ toDeleteClusterSchedulerConfig() { return this.to('DeleteClusterSchedulerConfig'); } /** * Grants permission to delete a CodeRepository * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCodeRepository.html */ toDeleteCodeRepository() { return this.to('DeleteCodeRepository'); } /** * Grants permission to delete a compilation job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCompilationJob.html */ toDeleteCompilationJob() { return this.to('DeleteCompilationJob'); } /** * Grants permission to delete a compute quota * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteComputeQuota.html */ toDeleteComputeQuota() { return this.to('DeleteComputeQuota'); } /** * Grants permission to delete a context * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteContext.html */ toDeleteContext() { return this.to('DeleteContext'); } /** * Grants permission to delete the data quality job definition created using the CreateDataQualityJobDefinition API * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteDataQualityJobDefinition.html */ toDeleteDataQualityJobDefinition() { return this.to('DeleteDataQualityJobDefinition'); } /** * Grants permission to delete a device fleet * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteDeviceFleet.html */ toDeleteDeviceFleet() { return this.to('DeleteDeviceFleet'); } /** * Grants permission to delete a Domain * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteDomain.html */ toDeleteDomain() { return this.to('DeleteDomain'); } /** * Grants permission to delete an edge deployment plan * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEdgeDeploymentPlan.html */ toDeleteEdgeDeploymentPlan() { return this.to('DeleteEdgeDeploymentPlan'); } /** * Grants permission to delete an edge deployment stage * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEdgeDeploymentStage.html */ toDeleteEdgeDeploymentStage() { return this.to('DeleteEdgeDeploymentStage'); } /** * Grants permission to delete an endpoint. Amazon SageMaker frees up all the resources that were deployed when the endpoint was created * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEndpoint.html */ toDeleteEndpoint() { return this.to('DeleteEndpoint'); } /** * Grants permission to delete the endpoint configuration created using the CreateEndpointConfig API. The DeleteEndpointConfig API deletes only the specified configuration. It does not delete any endpoints created using the configuration * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEndpointConfig.html */ toDeleteEndpointConfig() { return this.to('DeleteEndpointConfig'); } /** * Grants permission to delete an experiment * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteExperiment.html */ toDeleteExperiment() { return this.to('DeleteExperiment'); } /** * Grants permission to delete a feature group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteFeatureGroup.html */ toDeleteFeatureGroup() { return this.to('DeleteFeatureGroup'); } /** * Grants permission to delete the specified flow definition * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteFlowDefinition.html */ toDeleteFlowDefinition() { return this.to('DeleteFlowDefinition'); } /** * Grants permission to delete hubs * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHub.html */ toDeleteHub() { return this.to('DeleteHub'); } /** * Grants permission to delete hub content * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHubContent.html */ toDeleteHubContent() { return this.to('DeleteHubContent'); } /** * Grants permission to delete hub content reference * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHubContentReference.html */ toDeleteHubContentReference() { return this.to('DeleteHubContentReference'); } /** * Grants permission to delete a specified human loop * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHumanLoop.html */ toDeleteHumanLoop() { return this.to('DeleteHumanLoop'); } /** * Grants permission to delete the specified human task user interface (worker task template) * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHumanTaskUi.html */ toDeleteHumanTaskUi() { return this.to('DeleteHumanTaskUi'); } /** * Grants permission to delete a hyper parameter tuning job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHyperParameterTuningJob.html */ toDeleteHyperParameterTuningJob() { return this.to('DeleteHyperParameterTuningJob'); } /** * Grants permission to delete a SageMaker Image * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteImage.html */ toDeleteImage() { return this.to('DeleteImage'); } /** * Grants permission to delete a SageMaker ImageVersion * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteImageVersion.html */ toDeleteImageVersion() { return this.to('DeleteImageVersion'); } /** * Grants permission to delete an inference component. Amazon SageMaker frees up the resources that were reserved when the inference component was created * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteInferenceComponent.html */ toDeleteInferenceComponent() { return this.to('DeleteInferenceComponent'); } /** * Grants permission to delete an inference experiment * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteInferenceExperiment.html */ toDeleteInferenceExperiment() { return this.to('DeleteInferenceExperiment'); } /** * Grants permission to delete a lineage group policy * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/Welcome.html */ toDeleteLineageGroupPolicy() { return this.to('DeleteLineageGroupPolicy'); } /** * Grants permission to delete