UNPKG

cdk-iam-floyd

Version:

AWS IAM policy statement generator with fluent interface for AWS CDK

1,751 lines (1,750 loc) 819 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Sagemaker = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [sagemaker](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsagemaker.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Sagemaker extends shared_1.PolicyStatement { /** * Grants permission to access model package that can be used in Amazon SageMaker training or hosting services * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toAccessModelPackage() { return this.to('AccessModelPackage'); } /** * Grants permission to associate a lineage entity (artifact, context, action, experiment, experiment-trial-component) to each other * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddAssociation.html */ toAddAssociation() { return this.to('AddAssociation'); } /** * Grants permission to add or overwrite one or more tags for the specified Amazon SageMaker resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifTaggingAction() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddTags.html */ toAddTags() { return this.to('AddTags'); } /** * Grants permission to associate a trial component with a trial * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AssociateTrialComponent.html */ toAssociateTrialComponent() { return this.to('AssociateTrialComponent'); } /** * Grants permission to attach an Amazon EBS volume to a SageMaker HyperPod cluster node * * Access Level: Write * * Dependent actions: * - ec2:AttachVolume * - ec2:DescribeVolumes * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AttachClusterNodeVolume.html */ toAttachClusterNodeVolume() { return this.to('AttachClusterNodeVolume'); } /** * Grants permission to add multiple nodes at a time to a SageMaker HyperPod cluster * * Access Level: Write * * Dependent actions: * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchAddClusterNodes.html */ toBatchAddClusterNodes() { return this.to('BatchAddClusterNodes'); } /** * Grants permission to batch delete SageMaker HyperPod cluster nodes * * Access Level: Write * * Dependent actions: * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDeleteClusterNodes.html */ toBatchDeleteClusterNodes() { return this.to('BatchDeleteClusterNodes'); } /** * Grants permission to describe one or more ModelPackages * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDescribeModelPackage.html */ toBatchDescribeModelPackage() { return this.to('BatchDescribeModelPackage'); } /** * Grants permission to retrieve metrics associated with SageMaker Resources such as Training Jobs or Trial Components * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchGetMetrics() { return this.to('BatchGetMetrics'); } /** * Grants permission to get a batch of records from one or more feature groups * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_BatchGetRecord.html */ toBatchGetRecord() { return this.to('BatchGetRecord'); } /** * Grants permission to publish metrics associated with a SageMaker Resource such as a Training Job or Trial Component * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchPutMetrics() { return this.to('BatchPutMetrics'); } /** * Grants permission to invoke MLflow APIs * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow.html */ toCallMlflowAppApi() { return this.to('CallMlflowAppApi'); } /** * Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/partner-apps-onboard.html */ toCallPartnerAppApi() { return this.to('CallPartnerAppApi'); } /** * Grants permission to use bearer token in SageMaker Job and Inference runtime endpoints APIs * * Access Level: Read * * Possible conditions: * - .ifBearerTokenType() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CallWithBearerToken.html */ toCallWithBearerToken() { return this.to('CallWithBearerToken'); } /** * Grants permission to mark a rollout as complete for a job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CompleteRollout.html */ toCompleteRollout() { return this.to('CompleteRollout'); } /** * Grants permission to create an AI benchmark job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAIBenchmarkJob.html */ toCreateAIBenchmarkJob() { return this.to('CreateAIBenchmarkJob'); } /** * Grants permission to create an AI recommendation job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAIRecommendationJob.html */ toCreateAIRecommendationJob() { return this.to('CreateAIRecommendationJob'); } /** * Grants permission to create an AI workload configuration * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAIWorkloadConfig.html */ toCreateAIWorkloadConfig() { return this.to('CreateAIWorkloadConfig'); } /** * Grants permission to create an action * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAction.html */ toCreateAction() { return this.to('CreateAction'); } /** * Grants permission to create an algorithm * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAlgorithm.html */ toCreateAlgorithm() { return this.to('CreateAlgorithm'); } /** * Grants permission to create an App for a SageMaker UserProfile or Space * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifImageArns() * - .ifImageVersionArns() * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateApp.html */ toCreateApp() { return this.to('CreateApp'); } /** * Grants permission to create an AppImageConfig * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAppImageConfig.html */ toCreateAppImageConfig() { return this.to('CreateAppImageConfig'); } /** * Grants permission to create an artifact * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateArtifact.html */ toCreateArtifact() { return this.to('CreateArtifact'); } /** * Grants permission to create an AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJob.html */ toCreateAutoMLJob() { return this.to('CreateAutoMLJob'); } /** * Grants permission to create a V2 AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJobV2.html */ toCreateAutoMLJobV2() { return this.to('CreateAutoMLJobV2'); } /** * Grants permission to create a SageMaker HyperPod cluster * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - ec2:DescribeImages * - ec2:DescribeSnapshots * - ec2:ModifyImageAttribute * - ec2:ModifySnapshotAttribute * - eks:AssociateAccessPolicy * - eks:CreateAccessEntry * - eks:DeleteAccessEntry * - eks:DescribeAccessEntry * - eks:DescribeCluster * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCluster.html */ toCreateCluster() { return this.to('CreateCluster'); } /** * Grants permission to create a cluster scheduler config * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateClusterSchedulerConfig.html */ toCreateClusterSchedulerConfig() { return this.to('CreateClusterSchedulerConfig'); } /** * Grants permission to create a CodeRepository * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCodeRepository.html */ toCreateCodeRepository() { return this.to('CreateCodeRepository'); } /** * Grants permission to create a compilation job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCompilationJob.html */ toCreateCompilationJob() { return this.to('CreateCompilationJob'); } /** * Grants permission to create a compute quota * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateComputeQuota.html */ toCreateComputeQuota() { return this.to('CreateComputeQuota'); } /** * Grants permission to create a context * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateContext.html */ toCreateContext() { return this.to('CreateContext'); } /** * Grants permission to create a data quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDataQualityJobDefinition.html */ toCreateDataQualityJobDefinition() { return this.to('CreateDataQualityJobDefinition'); } /** * Grants permission to create a device fleet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDeviceFleet.html */ toCreateDeviceFleet() { return this.to('CreateDeviceFleet'); } /** * Grants permission to create a Domain for SageMaker Studio * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAppNetworkAccessType() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDomainSharingOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifImageArns() * - .ifImageVersionArns() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDomain.html */ toCreateDomain() { return this.to('CreateDomain'); } /** * Grants permission to create an edge deployment plan * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentPlan.html */ toCreateEdgeDeploymentPlan() { return this.to('CreateEdgeDeploymentPlan'); } /** * Grants permission to create an edge deployment stage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentStage.html */ toCreateEdgeDeploymentStage() { return this.to('CreateEdgeDeploymentStage'); } /** * Grants permission to create an edge packaging job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgePackagingJob.html */ toCreateEdgePackagingJob() { return this.to('CreateEdgePackagingJob'); } /** * Grants permission to create an endpoint using the endpoint configuration specified in the request * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpoint.html */ toCreateEndpoint() { return this.to('CreateEndpoint'); } /** * Grants permission to create an endpoint configuration that can be deployed using Amazon SageMaker hosting services * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifInstanceTypes() * - .ifModelArn() * - .ifVolumeKmsKeyArn() * - .ifServerlessMaxConcurrency() * - .ifServerlessMemorySize() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpointConfig.html */ toCreateEndpointConfig() { return this.to('CreateEndpointConfig'); } /** * Grants permission to create an experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateExperiment.html */ toCreateExperiment() { return this.to('CreateExperiment'); } /** * Grants permission to create a feature group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFeatureGroupOnlineStoreKmsKeyArn() * - .ifFeatureGroupOfflineStoreKmsKeyArn() * - .ifFeatureGroupOfflineStoreS3Uri() * - .ifFeatureGroupEnableOnlineStore() * - .ifFeatureGroupOfflineStoreConfig() * - .ifFeatureGroupDisableGlueTableCreation() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFeatureGroup.html */ toCreateFeatureGroup() { return this.to('CreateFeatureGroup'); } /** * Grants permission to create a flow definition, which defines settings for a human workflow * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFlowDefinition.html */ toCreateFlowDefinition() { return this.to('CreateFlowDefinition'); } /** * Grants permission to create a hub * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHub.html */ toCreateHub() { return this.to('CreateHub'); } /** * Grants permission to generate S3 presigned URLs with GetObject permission for accessing model artifacts * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentPresignedUrls.html */ toCreateHubContentPresignedUrls() { return this.to('CreateHubContentPresignedUrls'); } /** * Grants permission to create hub content reference * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentReference.html */ toCreateHubContentReference() { return this.to('CreateHubContentReference'); } /** * Grants permission to define the settings you will use for the human review workflow user interface * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHumanTaskUi.html */ toCreateHumanTaskUi() { return this.to('CreateHumanTaskUi'); } /** * Grants permission to create a hyper parameter tuning job that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFileSystemAccessMode() * - .ifFileSystemDirectoryPath() * - .ifFileSystemId() * - .ifFileSystemType() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHyperParameterTuningJob.html */ toCreateHyperParameterTuningJob() { return this.to('CreateHyperParameterTuningJob'); } /** * Grants permission to create a SageMaker Image * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImage.html */ toCreateImage() { return this.to('CreateImage'); } /** * Grants permission to create a SageMaker ImageVersion * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImageVersion.html */ toCreateImageVersion() { return this.to('CreateImageVersion'); } /** * Grants permission to create an inference component on an endpoint * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelArn() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceComponent.html */ toCreateInferenceComponent() { return this.to('CreateInferenceComponent'); } /** * Grants permission to create an inference experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceExperiment.html */ toCreateInferenceExperiment() { return this.to('CreateInferenceExperiment'); } /** * Grants permission to create an inference recommendations job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceRecommendationsJob.html */ toCreateInferenceRecommendationsJob() { return this.to('CreateInferenceRecommendationsJob'); } /** * Grants permission to create a SageMaker model customization job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifOutputKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateJob.html */ toCreateJob() { return this.to('CreateJob'); } /** * Grants permission to start a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifVolumeKmsKeyArn() * - .ifOutputKmsKeyArn() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateLabelingJob.html */ toCreateLabelingJob() { return this.to('CreateLabelingJob'); } /** * Grants permission to create a lineage group policy * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/Welcome.html */ toCreateLineageGroupPolicy() { return this.to('CreateLineageGroupPolicy'); } /** * Grants permission to create an MLflow app * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMlflowApp.html */ toCreateMlflowApp() { return this.to('CreateMlflowApp'); } /** * Grants permission to create an MLflow tracking server * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMlflowTrackingServer.html */ toCreateMlflowTrackingServer() { return this.to('CreateMlflowTrackingServer'); } /** * Grants permission to create a model in Amazon SageMaker. In the request, you specify a name for the model and describe one or more containers * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDirectGatedModelAccess() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModel.html */ toCreateModel() { return this.to('CreateModel'); } /** * Grants permission to create a model bias job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelBiasJobDefinition.html */ toCreateModelBiasJobDefinition() { return this.to('CreateModelBiasJobDefinition'); } /** * Grants permission to create a model card * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCard.html */ toCreateModelCard() { return this.to('CreateModelCard'); } /** * Grants permission to create an export job for a model card * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCardExportJob.html */ toCreateModelCardExportJob() { return this.to('CreateModelCardExportJob'); } /** * Grants permission to create a model explainability job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelExplainabilityJobDefinition.html */ toCreateModelExplainabilityJobDefinition() { return this.to('CreateModelExplainabilityJobDefinition'); } /** * Grants permission to create a ModelPackage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelApprovalStatus() * - .ifCustomerMetadataProperties() * - .ifModelLifeCycle() * - .ifModelLifeCycle() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackage.html */ toCreateModelPackage() { return this.to('CreateModelPackage'); } /** * Grants permission to create a ModelPackageGroup * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackageGroup.html */ toCreateModelPackageGroup() { return this.to('CreateModelPackageGroup'); } /** * Grants permission to create a model quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelQualityJobDefinition.html */ toCreateModelQualityJobDefinition() { return this.to('CreateModelQualityJobDefinition'); } /** * Grants permission to create a monitoring schedule * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMonitoringSchedule.html */ toCreateMonitoringSchedule() { return this.to('CreateMonitoringSchedule'); } /** * Grants permission to create an Amazon SageMaker notebook instance. A notebook instance is an Amazon EC2 instance running on a Jupyter Notebook * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifDirectInternetAccess() * - .ifInstanceTypes() * - .ifMinimumInstanceMetadataServiceVersion() * - .ifNotebookInstanceLifecycleConfigArns() * - .ifRootAccess() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstance.html */ toCreateNotebookInstance() { return this.to('CreateNotebookInstance'); } /** * Grants permission to create a notebook instance lifecycle configuration that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstanceLifecycleConfig.html */ toCreateNotebookInstanceLifecycleConfig() { return this.to('CreateNotebookInstanceLifecycleConfig'); } /** * Grants permission to create an optimization job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateOptimizationJob.html */ toCreateOptimizationJob() { return this.to('CreateOptimizationJob'); } /** * Grants permission to create an Amazon SageMaker Partner AI App * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerApp.html */ toCreatePartnerApp() { return this.to('CreatePartnerApp'); } /** * Grants permission to return a URL that you can use from your browser to connect to the Amazon SageMaker Partner AI App * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerAppPresignedUrl.html */ toCreatePartnerAppPresignedUrl() { return this.to('CreatePartnerAppPresignedUrl'); } /** * Grants permission to create a pipeline * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePipeline.html */ toCreatePipeline() { return this.to('CreatePipeline'); } /** * Grants permission to return a URL that you can use from your browser to connect to the Domain as a specified UserProfile when AuthMode is 'IAM' * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedDomainUrl.html */ toCreatePresignedDomainUrl() { return this.to('CreatePresignedDomainUrl'); } /** * Grants permission to return a URL that you can use from your browser to connect to the MLflow app * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedMlflowAppUrl.html */ toCreatePresignedMlflowAppUrl() { return this.to('CreatePresignedMlflowAppUrl'); } /** * Grants permission to return a URL that you can use from your browser to connect to the MLflow tracking server * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedMlflowTrackingServerUrl.html */ toCreatePresignedMlflowTrackingServerUrl() { return this.to('CreatePresignedMlflowTrackingServerUrl'); } /** * Grants permission to create a URL that you can use from your browser to connect to the Notebook Instance * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePresignedNotebookInstanceUrl.html */ toCreatePresignedNotebookInstanceUrl() { return this.to('CreatePresignedNotebookInstanceUrl'); } /** * Grants permission to start a processing job. After processing completes, Amazon SageMaker saves the resulting artifacts and other optional output to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifInterContainerTrafficEncryption() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProcessingJob.html */ toCreateProcessingJob() { return this.to('CreateProcessingJob'); } /** * Grants permission to create a Project * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateProject.html */ toCreateProject() { return this.to('CreateProject'); } /** * Grants permission to create a reserved capacity * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateReservedCapacity.html */ toCreateReservedCapacity() { return this.to('CreateReservedCapacity'); } /** * Grants permission to create a shared model in a SageMaker Studio application * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/canvas-collaborate-permissions.html */ toCreateSharedModel() { return this.to('CreateSharedModel'); } /** * Grants permission to create a Space for a SageMaker Domain * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifImageArns() * - .ifImageVersionArns() * - .ifOwnerUserProfileArn() * - .ifRemoteAccess() * - .ifSpaceSharingType() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateSpace.html */ toCreateSpace() { return this.to('CreateSpace'); } /** * Grants permission to create a Studio Lifecycle Configuration that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateStudioLifecycleConfig.html */ toCreateStudioLifecycleConfig() { return this.to('CreateStudioLifecycleConfig'); } /** * Grants permission to start a model training job. After training completes, Amazon SageMaker saves the resulting model artifacts and other optional output to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFileSystemAccessMode() * - .ifFileSystemDirectoryPath() * - .ifFileSystemId() * - .ifFileSystemType() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifKeepAlivePeriod() * - .ifEnableRemoteDebug() * - .ifDirectGatedModelAccess() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrainingJob.html */ toCreateTrainingJob() { return this.to('CreateTrainingJob'); } /** * Grants permission to create a training plan that allocates resources for scheduling workloads within a specified time range * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * - sagemaker:CreateReservedCapacity * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrainingPlan.html */ toCreateTrainingPlan() { return this.to('CreateTrainingPlan'); } /** * Grants permission to start a transform job. After the results are obtained, Amazon SageMaker saves them to an Amazon S3 location that you specify * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifModelArn() * - .ifOutputKmsKeyArn() * - .ifVolumeKmsKeyArn() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTransformJob.html */ toCreateTransformJob() { return this.to('CreateTransformJob'); } /** * Grants permission to create a trial * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrial.html */ toCreateTrial() { return this.to('CreateTrial'); } /** * Grants permission to create a trial component * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateTrialComponent.html */ toCreateTrialComponent() { return this.to('CreateTrialComponent'); } /** * Grants permission to create a UserProfile for a SageMaker Domain * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifVpcSecurityGroupIds() * - .ifInstanceTypes() * - .ifDomainSharingOutputKmsKeyArn() * - .ifImageArns() * - .ifImageVersionArns() * - .ifStudioLifecycleConfigArns() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateUserProfile.html */ toCreateUserProfile() { return this.to('CreateUserProfile'); } /** * Grants permission to create a workforce * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateWorkforce.html */ toCreateWorkforce() { return this.to('CreateWorkforce'); } /** * Grants permission to create a workteam * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateWorkteam.html */ toCreateWorkteam() { return this.to('CreateWorkteam'); } /** * Grants permission to delete an AI benchmark job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAIBenchmarkJob.html */ toDeleteAIBenchmarkJob() { return this.to('DeleteAIBenchmarkJob'); } /** * Grants permission to delete an AI recommendation job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAIRecommendationJob.html */ toDeleteAIRecommendationJob() { return this.to('DeleteAIRecommendationJob'); } /** * Grants permission to delete an AI workload configuration * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAIWorkloadConfig.html */ toDeleteAIWorkloadConfig() { return this.to('DeleteAIWorkloadConfig'); } /** * Grants permission to delete an action * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAction.html */ toDeleteAction() { return this.to('DeleteAction'); } /** * Grants permission to delete an algorithm * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAlgorithm.html */ toDeleteAlgorithm() { return this.to('DeleteAlgorithm'); } /** * Grants permission to delete an App * * Access Level: Write * * Possible conditions: * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteApp.html */ toDeleteApp() { return this.to('DeleteApp'); } /** * Grants permission to delete an AppImageConfig * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAppImageConfig.html */ toDeleteAppImageConfig() { return this.to('DeleteAppImageConfig'); } /** * Grants permission to delete an artifact * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteArtifact.html */ toDeleteArtifact() { return this.to('DeleteArtifact'); } /** * Grants permission to delete the association from a lineage entity (artifact, context, action, experiment, experiment-trial-component) to another * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteAssociation.html */ toDeleteAssociation() { return this.to('DeleteAssociation'); } /** * Grants permission to delete a SageMaker HyperPod cluster * * Access Level: Write * * Dependent actions: * - eks:DeleteAccessEntry * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCluster.html */ toDeleteCluster() { return this.to('DeleteCluster'); } /** * Grants permission to delete a cluster scheduler config * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteClusterSchedulerConfig.html */ toDeleteClusterSchedulerConfig() { return this.to('DeleteClusterSchedulerConfig'); } /** * Grants permission to delete a CodeRepository * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCodeRepository.html */ toDeleteCodeRepository() { return this.to('DeleteCodeRepository'); } /** * Grants permission to delete a compilation job * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteCompilationJob.html */ toDeleteCompilationJob() { return this.to('DeleteCompilationJob'); } /** * Grants permission to delete a compute quota * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteComputeQuota.html */ toDeleteComputeQuota() { return this.to('DeleteComputeQuota'); } /** * Grants permission to delete a context * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_DeleteContext.html */ toDeleteContext() { return this.to('DeleteContext'); } /** * Grants permission to delete the data quality job definition created using the CreateDataQualityJobDefinition API * * Access Level: Write