UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,695 lines 258 kB
import { AccessLevelList } from '../../shared/access-level'; import { PolicyStatement, Operator } from '../../shared'; import { aws_iam as iam } from "aws-cdk-lib"; /** * Statement provider for service [sagemaker](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsagemaker.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ export declare class Sagemaker extends PolicyStatement { servicePrefix: string; /** * Grants permission to access model package that can be used in Amazon SageMaker training or hosting services * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toAccessModelPackage(): this; /** * Grants permission to associate a lineage entity (artifact, context, action, experiment, experiment-trial-component) to each other * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddAssociation.html */ toAddAssociation(): this; /** * Grants permission to add or overwrite one or more tags for the specified Amazon SageMaker resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifTaggingAction() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddTags.html */ toAddTags(): this; /** * Grants permission to associate a trial component with a trial * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AssociateTrialComponent.html */ toAssociateTrialComponent(): this; /** * Grants permission to attach an Amazon EBS volume to a SageMaker HyperPod cluster node * * Access Level: Write * * Dependent actions: * - ec2:AttachVolume * - ec2:DescribeVolumes * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AttachClusterNodeVolume.html */ toAttachClusterNodeVolume(): this; /** * Grants permission to add multiple nodes at a time to a SageMaker HyperPod cluster * * Access Level: Write * * Dependent actions: * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchAddClusterNodes.html */ toBatchAddClusterNodes(): this; /** * Grants permission to batch delete SageMaker HyperPod cluster nodes * * Access Level: Write * * Dependent actions: * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDeleteClusterNodes.html */ toBatchDeleteClusterNodes(): this; /** * Grants permission to describe one or more ModelPackages * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDescribeModelPackage.html */ toBatchDescribeModelPackage(): this; /** * Grants permission to retrieve metrics associated with SageMaker Resources such as Training Jobs or Trial Components * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchGetMetrics(): this; /** * Grants permission to get a batch of records from one or more feature groups * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_BatchGetRecord.html */ toBatchGetRecord(): this; /** * Grants permission to publish metrics associated with a SageMaker Resource such as a Training Job or Trial Component * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchPutMetrics(): this; /** * Grants permission to invoke MLflow APIs * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow.html */ toCallMlflowAppApi(): this; /** * Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/partner-apps-onboard.html */ toCallPartnerAppApi(): this; /** * Grants permission to use bearer token in SageMaker Job and Inference runtime endpoints APIs * * Access Level: Read * * Possible conditions: * - .ifBearerTokenType() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CallWithBearerToken.html */ toCallWithBearerToken(): this; /** * Grants permission to mark a rollout as complete for a job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CompleteRollout.html */ toCompleteRollout(): this; /** * Grants permission to create an AI benchmark job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAIBenchmarkJob.html */ toCreateAIBenchmarkJob(): this; /** * Grants permission to create an AI recommendation job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAIRecommendationJob.html */ toCreateAIRecommendationJob(): this; /** * Grants permission to create an AI workload configuration * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAIWorkloadConfig.html */ toCreateAIWorkloadConfig(): this; /** * Grants permission to create an action * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAction.html */ toCreateAction(): this; /** * Grants permission to create an algorithm * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAlgorithm.html */ toCreateAlgorithm(): this; /** * Grants permission to create an App for a SageMaker UserProfile or Space * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifImageArns() * - .ifImageVersionArns() * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateApp.html */ toCreateApp(): this; /** * Grants permission to create an AppImageConfig * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAppImageConfig.html */ toCreateAppImageConfig(): this; /** * Grants permission to create an artifact * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateArtifact.html */ toCreateArtifact(): this; /** * Grants permission to create an AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJob.html */ toCreateAutoMLJob(): this; /** * Grants permission to create a V2 AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJobV2.html */ toCreateAutoMLJobV2(): this; /** * Grants permission to create a SageMaker HyperPod cluster * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - ec2:DescribeImages * - ec2:DescribeSnapshots * - ec2:ModifyImageAttribute * - ec2:ModifySnapshotAttribute * - eks:AssociateAccessPolicy * - eks:CreateAccessEntry * - eks:DeleteAccessEntry * - eks:DescribeAccessEntry * - eks:DescribeCluster * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCluster.html */ toCreateCluster(): this; /** * Grants permission to create a cluster scheduler config * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateClusterSchedulerConfig.html */ toCreateClusterSchedulerConfig(): this; /** * Grants permission to create a CodeRepository * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCodeRepository.html */ toCreateCodeRepository(): this; /** * Grants permission to create a compilation job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCompilationJob.html */ toCreateCompilationJob(): this; /** * Grants permission to create a compute quota * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateComputeQuota.html */ toCreateComputeQuota(): this; /** * Grants permission to create a context * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateContext.html */ toCreateContext(): this; /** * Grants permission to create a data quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDataQualityJobDefinition.html */ toCreateDataQualityJobDefinition(): this; /** * Grants permission to create a device fleet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDeviceFleet.html */ toCreateDeviceFleet(): this; /** * Grants permission to create a Domain for SageMaker Studio * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAppNetworkAccessType() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDomainSharingOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifImageArns() * - .ifImageVersionArns() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDomain.html */ toCreateDomain(): this; /** * Grants permission to create an edge deployment plan * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentPlan.html */ toCreateEdgeDeploymentPlan(): this; /** * Grants permission to create an edge deployment stage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentStage.html */ toCreateEdgeDeploymentStage(): this; /** * Grants permission to create an edge packaging job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgePackagingJob.html */ toCreateEdgePackagingJob(): this; /** * Grants permission to create an endpoint using the endpoint configuration specified in the request * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpoint.html */ toCreateEndpoint(): this; /** * Grants permission to create an endpoint configuration that can be deployed using Amazon SageMaker hosting services * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifInstanceTypes() * - .ifModelArn() * - .ifVolumeKmsKeyArn() * - .ifServerlessMaxConcurrency() * - .ifServerlessMemorySize() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpointConfig.html */ toCreateEndpointConfig(): this; /** * Grants permission to create an experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateExperiment.html */ toCreateExperiment(): this; /** * Grants permission to create a feature group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFeatureGroupOnlineStoreKmsKeyArn() * - .ifFeatureGroupOfflineStoreKmsKeyArn() * - .ifFeatureGroupOfflineStoreS3Uri() * - .ifFeatureGroupEnableOnlineStore() * - .ifFeatureGroupOfflineStoreConfig() * - .ifFeatureGroupDisableGlueTableCreation() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFeatureGroup.html */ toCreateFeatureGroup(): this; /** * Grants permission to create a flow definition, which defines settings for a human workflow * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFlowDefinition.html */ toCreateFlowDefinition(): this; /** * Grants permission to create a hub * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHub.html */ toCreateHub(): this; /** * Grants permission to generate S3 presigned URLs with GetObject permission for accessing model artifacts * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentPresignedUrls.html */ toCreateHubContentPresignedUrls(): this; /** * Grants permission to create hub content reference * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentReference.html */ toCreateHubContentReference(): this; /** * Grants permission to define the settings you will use for the human review workflow user interface * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHumanTaskUi.html */ toCreateHumanTaskUi(): this; /** * Grants permission to create a hyper parameter tuning job that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFileSystemAccessMode() * - .ifFileSystemDirectoryPath() * - .ifFileSystemId() * - .ifFileSystemType() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHyperParameterTuningJob.html */ toCreateHyperParameterTuningJob(): this; /** * Grants permission to create a SageMaker Image * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImage.html */ toCreateImage(): this; /** * Grants permission to create a SageMaker ImageVersion * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImageVersion.html */ toCreateImageVersion(): this; /** * Grants permission to create an inference component on an endpoint * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelArn() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceComponent.html */ toCreateInferenceComponent(): this; /** * Grants permission to create an inference experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceExperiment.html */ toCreateInferenceExperiment(): this; /** * Grants permission to create an inference recommendations job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceRecommendationsJob.html */ toCreateInferenceRecommendationsJob(): this; /** * Grants permission to create a SageMaker model customization job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifOutputKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateJob.html */ toCreateJob(): this; /** * Grants permission to start a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifVolumeKmsKeyArn() * - .ifOutputKmsKeyArn() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateLabelingJob.html */ toCreateLabelingJob(): this; /** * Grants permission to create a lineage group policy * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/Welcome.html */ toCreateLineageGroupPolicy(): this; /** * Grants permission to create an MLflow app * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMlflowApp.html */ toCreateMlflowApp(): this; /** * Grants permission to create an MLflow tracking server * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMlflowTrackingServer.html */ toCreateMlflowTrackingServer(): this; /** * Grants permission to create a model in Amazon SageMaker. In the request, you specify a name for the model and describe one or more containers * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDirectGatedModelAccess() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModel.html */ toCreateModel(): this; /** * Grants permission to create a model bias job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelBiasJobDefinition.html */ toCreateModelBiasJobDefinition(): this; /** * Grants permission to create a model card * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCard.html */ toCreateModelCard(): this; /** * Grants permission to create an export job for a model card * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCardExportJob.html */ toCreateModelCardExportJob(): this; /** * Grants permission to create a model explainability job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelExplainabilityJobDefinition.html */ toCreateModelExplainabilityJobDefinition(): this; /** * Grants permission to create a ModelPackage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelApprovalStatus() * - .ifCustomerMetadataProperties() * - .ifModelLifeCycle() * - .ifModelLifeCycle() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackage.html */ toCreateModelPackage(): this; /** * Grants permission to create a ModelPackageGroup * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackageGroup.html */ toCreateModelPackageGroup(): this; /** * Grants permission to create a model quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelQualityJobDefinition.html */ toCreateModelQualityJobDefinition(): this; /** * Grants permission to create a monitoring schedule * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMonitoringSchedule.html */ toCreateMonitoringSchedule(): this; /** * Grants permission to create an Amazon SageMaker notebook instance. A notebook instance is an Amazon EC2 instance running on a Jupyter Notebook * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifDirectInternetAccess() * - .ifInstanceTypes() * - .ifMinimumInstanceMetadataServiceVersion() * - .ifNotebookInstanceLifecycleConfigArns() * - .ifRootAccess() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstance.html */ toCreateNotebookInstance(): this; /** * Grants permission to create a notebook instance lifecycle configuration that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstanceLifecycleConfig.html */ toCreateNotebookInstanceLifecycleConfig(): this; /** * Grants permission to create an optimization job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateOptimizationJob.html */ toCreateOptimizationJob(): this; /** * Grants permission to create an Amazon SageMaker Partner AI App * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerApp.html */ toCreatePartnerApp(): this; /** * Grants permission to return a URL that you can use from your browser to connect to the Amazon SageMaker Partner AI App * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerAppPresignedUrl.html */ toCreatePartnerAppPresignedUrl(): this; /** * Grants permission to create a pipeline * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePipeline.html */ toCreatePipeline(): this; /** * Grants permission to return a URL that you can use from your browser to connect to the Domain as a specified UserProfile when AuthMode is 'IAM' * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedDomainUrl.html */ toCreatePresignedDomainUrl(): this; /** * Grants permission to return a URL that you can use from your browser to connect to the MLflow app * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedMlflowAppUrl.html */ toCreatePresignedMlflowAppUrl(): this; /** * Grants permission to return a URL that you can use from your browser to connect to the MLflow tracking server * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedMlflowTrackingServerUrl.html */ toCreatePresignedMlflowTrackingServerUrl(): this; /** * Grants permission to create a URL that you can use from your browser to connect to the Notebook Instance * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedNotebookInstanceUrl.html */ toCreatePresignedNotebookInstanceUrl(): this; /** * Grants permission to start a processing job. After processing completes, Amazon SageMaker saves the resulting artifacts and other optional output to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifInterContainerTrafficEncryption() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProcessingJob.html */ toCreateProcessingJob(): this; /** * Grants permission to create a Project * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProject.html */ toCreateProject(): this; /** * Grants permission to create a reserved capacity * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateReservedCapacity.html */ toCreateReservedCapacity(): this; /** * Grants permission to create a shared model in a SageMaker Studio application * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/canvas-collaborate-permissions.html */ toCreateSharedModel(): this; /** * Grants permission to create a Space for a SageMaker Domain * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifImageArns() * - .ifImageVersionArns() * - .ifOwnerUserProfileArn() * - .ifRemoteAccess() * - .ifSpaceSharingType() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateSpace.html */ toCreateSpace(): this; /** * Grants permission to create a Studio Lifecycle Configuration that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateStudioLifecycleConfig.html */ toCreateStudioLifecycleConfig(): this; /** * Grants permission to start a model training job. After training completes, Amazon SageMaker saves the resulting model artifacts and other optional output to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFileSystemAccessMode() * - .ifFileSystemDirectoryPath() * - .ifFileSystemId() * - .ifFileSystemType() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifKeepAlivePeriod() * - .ifEnableRemoteDebug() * - .ifDirectGatedModelAccess() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrainingJob.html */ toCreateTrainingJob(): this; /** * Grants permission to create a training plan that allocates resources for scheduling workloads within a specified time range * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * - sagemaker:CreateReservedCapacity * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrainingPlan.html */ toCreateTrainingPlan(): this; /** * Grants permission to start a transform job. After the results are obtained, Amazon SageMaker saves them to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifModelArn() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTransformJob.html */ toCreateTransformJob(): this; /** * Grants permission to create a trial * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrial.html */ toCreateTrial(): this; /** * Grants permission to create a trial component * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrialComponent.html */ toCreateTrialComponent(): this; /** * Grants permission to create a UserProfile for a SageMaker Domain * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifVpcSecurityGroupIds() * - .ifInstanceTypes() * - .ifDomainSharingOutputKmsKeyArn() * - .ifImageArns() * - .ifImageVersionArns() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateUserProfile.html */ toCreateUserProfile(): this; /** * Grants permission to create a workforce * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateWorkforce.html */ toCreateWorkforce(): this; /** * Grants permission to create a workteam * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateWorkteam.html */ toCreateWorkteam(): this; /** * Grants permission to delete an AI benchmark job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAIBenchmarkJob.html */ toDeleteAIBenchmarkJob(): this; /** * Grants permission to delete an AI recommendation job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAIRecommendationJob.html */ toDeleteAIRecommendationJob(): this; /** * Grants permission to delete an AI workload configuration * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAIWorkloadConfig.html */ toDeleteAIWorkloadConfig(): this; /** * Grants permission to delete an action * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAction.html */ toDeleteAction(): this; /** * Grants permission to delete an algorithm * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAlgorithm.html */ toDeleteAlgorithm(): this; /** * Grants permission to delete an App * * Access Level: Write * * Possible conditions: * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteApp.html */ toDeleteApp(): this; /** * Grants permission to delete an AppImageConfig * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAppImageConfig.html */ toDeleteAppImageConfig(): this; /** * Grants permission to delete an artifact * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteArtifact.html */ toDeleteArtifact(): this; /** * Grants permission to delete the association from a lineage entity (artifact, context, action, experiment, experiment-trial-component) to another * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAssociation.html */ toDeleteAssociation(): this; /** * Grants permission to delete a SageMaker HyperPod cluster * * Access Level: Write * * Dependent actions: * - eks:DeleteAccessEntry * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCluster.html */ toDeleteCluster(): this; /** * Grants permission to delete a cluster scheduler config * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteClusterSchedulerConfig.html */ toDeleteClusterSchedulerConfig(): this; /** * Grants permission to delete a CodeRepository * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCodeRepository.html */ toDeleteCodeRepository(): this; /** * Grants permission to delete a compilation job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCompilationJob.html */ toDeleteCompilationJob(): this; /** * Grants permission to delete a compute quota * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteComputeQuota.html */ toDeleteComputeQuota(): this; /** * Grants permission to delete a context * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteContext.html */ toDeleteContext(): this; /** * Grants permission to delete the data quality job definition created using the CreateDataQualityJobDefinition API * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteDataQualityJobDefinition.html */ toDeleteDataQualityJobDefinition(): this; /** * Grants permission to delete a device fleet * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteDeviceFleet.html */ toDeleteDeviceFleet(): this; /** * Grants permission to delete a Domain * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteDomain.html */ toDeleteDomain(): this; /** * Grants permission to delete an edge deployment plan * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEdgeDeploymentPlan.html */ toDeleteEdgeDeploymentPlan(): this; /** * Grants permission to delete an edge deployment stage * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEdgeDeploymentStage.html */ toDeleteEdgeDeploymentStage(): this; /** * Grants permission to delete an endpoint. Amazon SageMaker frees up all the resources that were deployed when the endpoint was created * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEndpoint.html */ toDeleteEndpoint(): this; /** * Grants permission to delete the endpoint configuration created using the CreateEndpointConfig API. The DeleteEndpointConfig API deletes only the specified configuration. It does not delete any endpoints created using the configuration * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteEndpointConfig.html */ toDeleteEndpointConfig(): this; /** * Grants permission to delete an experiment * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteExperiment.html */ toDeleteExperiment(): this; /** * Grants permission to delete a feature group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteFeatureGroup.html */ toDeleteFeatureGroup(): this; /** * Grants permission to delete the specified flow definition * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteFlowDefinition.html */ toDeleteFlowDefinition(): this; /** * Grants permission to delete hubs * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHub.html */ toDeleteHub(): this; /** * Grants permission to delete hub content * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHubContent.html */ toDeleteHubContent(): this; /** * Grants permission to delete hub content reference * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHubContentReference.html */ toDeleteHubContentReference(): this; /** * Grants permission to delete a specified human loop * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHumanLoop.html */ toDeleteHumanLoop(): this; /** * Grants permission to delete the specified human task user interface (worker task template) * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHumanTaskUi.html */ toDeleteHumanTaskUi(): this; /** * Grants permission to delete a hyper parameter tuning job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteHyperParameterTuningJob.html */ toDeleteHyperParameterTuningJob(): this; /** * Grants permission to delete a SageMaker Image * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteImage.html */ toDeleteImage(): this; /** * Grants permission to delete a SageMaker ImageVersion * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteImageVersion.html */ toDeleteImageVersion(): this; /** * Grants permission to delete an inference component. Amazon SageMaker frees up the resources that were reserved when the inference component was created * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteInferenceComponent.html */ toDeleteInferenceComponent(): this; /** * Grants permission to delete an inference experiment * * Access Level: W