UNPKG

iam-floyd

Version:

AWS IAM policy statement generator with fluent interface

1,604 lines (1,603 loc) 760 kB
"use strict"; Object.defineProperty(exports, "__esModule", { value: true }); exports.Sagemaker = void 0; const shared_1 = require("../../shared"); /** * Statement provider for service [sagemaker](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsagemaker.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ class Sagemaker extends shared_1.PolicyStatement { /** * Statement provider for service [sagemaker](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonsagemaker.html). * * @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement */ constructor(sid) { super(sid); this.servicePrefix = 'sagemaker'; this.accessLevelList = { Write: [ 'AddAssociation', 'AssociateTrialComponent', 'AttachClusterNodeVolume', 'BatchAddClusterNodes', 'BatchDeleteClusterNodes', 'BatchPutMetrics', 'CallMlflowAppApi', 'CallPartnerAppApi', 'CreateAction', 'CreateAlgorithm', 'CreateApp', 'CreateAppImageConfig', 'CreateArtifact', 'CreateAutoMLJob', 'CreateAutoMLJobV2', 'CreateCluster', 'CreateClusterSchedulerConfig', 'CreateCodeRepository', 'CreateCompilationJob', 'CreateComputeQuota', 'CreateContext', 'CreateDataQualityJobDefinition', 'CreateDeviceFleet', 'CreateDomain', 'CreateEdgeDeploymentPlan', 'CreateEdgeDeploymentStage', 'CreateEdgePackagingJob', 'CreateEndpoint', 'CreateEndpointConfig', 'CreateExperiment', 'CreateFeatureGroup', 'CreateFlowDefinition', 'CreateHub', 'CreateHubContentReference', 'CreateHumanTaskUi', 'CreateHyperParameterTuningJob', 'CreateImage', 'CreateImageVersion', 'CreateInferenceComponent', 'CreateInferenceExperiment', 'CreateInferenceRecommendationsJob', 'CreateLabelingJob', 'CreateLineageGroupPolicy', 'CreateMlflowApp', 'CreateMlflowTrackingServer', 'CreateModel', 'CreateModelBiasJobDefinition', 'CreateModelCard', 'CreateModelCardExportJob', 'CreateModelExplainabilityJobDefinition', 'CreateModelPackage', 'CreateModelPackageGroup', 'CreateModelQualityJobDefinition', 'CreateMonitoringSchedule', 'CreateNotebookInstance', 'CreateNotebookInstanceLifecycleConfig', 'CreateOptimizationJob', 'CreatePartnerApp', 'CreatePartnerAppPresignedUrl', 'CreatePipeline', 'CreatePresignedDomainUrl', 'CreatePresignedMlflowAppUrl', 'CreatePresignedMlflowTrackingServerUrl', 'CreatePresignedNotebookInstanceUrl', 'CreateProcessingJob', 'CreateProject', 'CreateReservedCapacity', 'CreateSharedModel', 'CreateSpace', 'CreateStudioLifecycleConfig', 'CreateTrainingJob', 'CreateTrainingPlan', 'CreateTransformJob', 'CreateTrial', 'CreateTrialComponent', 'CreateUserProfile', 'CreateWorkforce', 'CreateWorkteam', 'DeleteAction', 'DeleteAlgorithm', 'DeleteApp', 'DeleteAppImageConfig', 'DeleteArtifact', 'DeleteAssociation', 'DeleteCluster', 'DeleteClusterSchedulerConfig', 'DeleteCodeRepository', 'DeleteCompilationJob', 'DeleteComputeQuota', 'DeleteContext', 'DeleteDataQualityJobDefinition', 'DeleteDeviceFleet', 'DeleteDomain', 'DeleteEdgeDeploymentPlan', 'DeleteEdgeDeploymentStage', 'DeleteEndpoint', 'DeleteEndpointConfig', 'DeleteExperiment', 'DeleteFeatureGroup', 'DeleteFlowDefinition', 'DeleteHub', 'DeleteHubContent', 'DeleteHubContentReference', 'DeleteHumanLoop', 'DeleteHumanTaskUi', 'DeleteHyperParameterTuningJob', 'DeleteImage', 'DeleteImageVersion', 'DeleteInferenceComponent', 'DeleteInferenceExperiment', 'DeleteLineageGroupPolicy', 'DeleteMlflowApp', 'DeleteMlflowTrackingServer', 'DeleteModel', 'DeleteModelBiasJobDefinition', 'DeleteModelCard', 'DeleteModelExplainabilityJobDefinition', 'DeleteModelPackage', 'DeleteModelPackageGroup', 'DeleteModelPackageGroupPolicy', 'DeleteModelQualityJobDefinition', 'DeleteMonitoringSchedule', 'DeleteNotebookInstance', 'DeleteNotebookInstanceLifecycleConfig', 'DeleteOptimizationJob', 'DeletePartnerApp', 'DeletePipeline', 'DeleteProject', 'DeleteRecord', 'DeleteResourcePolicy', 'DeleteSpace', 'DeleteStudioLifecycleConfig', 'DeleteTrial', 'DeleteTrialComponent', 'DeleteUserProfile', 'DeleteWorkforce', 'DeleteWorkteam', 'DeployHubModel', 'DeregisterDevices', 'DetachClusterNodeVolume', 'DisableSagemakerServicecatalogPortfolio', 'DisassociateTrialComponent', 'EnableSagemakerServicecatalogPortfolio', 'ImportHubContent', 'PutLineageGroupPolicy', 'PutModelPackageGroupPolicy', 'PutRecord', 'PutResourcePolicy', 'RegisterDevices', 'RetryPipelineExecution', 'SendHeartbeat', 'SendPipelineExecutionStepFailure', 'SendPipelineExecutionStepSuccess', 'SendSharedModelEvent', 'StartEdgeDeploymentStage', 'StartHumanLoop', 'StartInferenceExperiment', 'StartMlflowTrackingServer', 'StartMonitoringSchedule', 'StartNotebookInstance', 'StartPipelineExecution', 'StartSession', 'StopAutoMLJob', 'StopCompilationJob', 'StopEdgeDeploymentStage', 'StopEdgePackagingJob', 'StopHumanLoop', 'StopHyperParameterTuningJob', 'StopInferenceExperiment', 'StopInferenceRecommendationsJob', 'StopLabelingJob', 'StopMlflowTrackingServer', 'StopMonitoringSchedule', 'StopNotebookInstance', 'StopOptimizationJob', 'StopPipelineExecution', 'StopProcessingJob', 'StopTrainingJob', 'StopTransformJob', 'TrainHubModel', 'UpdateAction', 'UpdateAppImageConfig', 'UpdateArtifact', 'UpdateCluster', 'UpdateClusterInference', 'UpdateClusterSchedulerConfig', 'UpdateClusterSoftware', 'UpdateCodeRepository', 'UpdateComputeQuota', 'UpdateContext', 'UpdateDeviceFleet', 'UpdateDevices', 'UpdateDomain', 'UpdateEndpoint', 'UpdateEndpointWeightsAndCapacities', 'UpdateExperiment', 'UpdateFeatureGroup', 'UpdateFeatureMetadata', 'UpdateHub', 'UpdateHubContent', 'UpdateHubContentReference', 'UpdateImage', 'UpdateImageVersion', 'UpdateInferenceComponent', 'UpdateInferenceComponentRuntimeConfig', 'UpdateInferenceExperiment', 'UpdateMlflowApp', 'UpdateMlflowTrackingServer', 'UpdateModelCard', 'UpdateModelPackage', 'UpdateMonitoringAlert', 'UpdateMonitoringSchedule', 'UpdateNotebookInstance', 'UpdateNotebookInstanceLifecycleConfig', 'UpdatePartnerApp', 'UpdatePipeline', 'UpdatePipelineExecution', 'UpdatePipelineVersion', 'UpdateProject', 'UpdateSharedModel', 'UpdateSpace', 'UpdateTrainingJob', 'UpdateTrial', 'UpdateTrialComponent', 'UpdateUserProfile', 'UpdateWorkforce', 'UpdateWorkteam' ], Tagging: [ 'AddTags', 'DeleteTags' ], Read: [ 'BatchDescribeModelPackage', 'BatchGetMetrics', 'BatchGetRecord', 'CreateHubContentPresignedUrls', 'DescribeAction', 'DescribeAlgorithm', 'DescribeApp', 'DescribeAppImageConfig', 'DescribeArtifact', 'DescribeAutoMLJob', 'DescribeAutoMLJobV2', 'DescribeCluster', 'DescribeClusterEvent', 'DescribeClusterInference', 'DescribeClusterNode', 'DescribeClusterSchedulerConfig', 'DescribeCodeRepository', 'DescribeCompilationJob', 'DescribeComputeQuota', 'DescribeContext', 'DescribeDataQualityJobDefinition', 'DescribeDevice', 'DescribeDeviceFleet', 'DescribeDomain', 'DescribeEdgeDeploymentPlan', 'DescribeEdgePackagingJob', 'DescribeEndpoint', 'DescribeEndpointConfig', 'DescribeExperiment', 'DescribeFeatureGroup', 'DescribeFeatureMetadata', 'DescribeFlowDefinition', 'DescribeHub', 'DescribeHubContent', 'DescribeHumanLoop', 'DescribeHumanTaskUi', 'DescribeHyperParameterTuningJob', 'DescribeImage', 'DescribeImageVersion', 'DescribeInferenceComponent', 'DescribeInferenceExperiment', 'DescribeInferenceRecommendationsJob', 'DescribeLabelingJob', 'DescribeLineageGroup', 'DescribeMlflowApp', 'DescribeMlflowTrackingServer', 'DescribeModel', 'DescribeModelBiasJobDefinition', 'DescribeModelCard', 'DescribeModelCardExportJob', 'DescribeModelExplainabilityJobDefinition', 'DescribeModelPackage', 'DescribeModelPackageGroup', 'DescribeModelQualityJobDefinition', 'DescribeMonitoringSchedule', 'DescribeNotebookInstance', 'DescribeNotebookInstanceLifecycleConfig', 'DescribeOptimizationJob', 'DescribePartnerApp', 'DescribePipeline', 'DescribePipelineDefinitionForExecution', 'DescribePipelineExecution', 'DescribeProcessingJob', 'DescribeProject', 'DescribeReservedCapacity', 'DescribeSharedModel', 'DescribeSpace', 'DescribeStudioLifecycleConfig', 'DescribeSubscribedWorkteam', 'DescribeTrainingJob', 'DescribeTrainingPlan', 'DescribeTransformJob', 'DescribeTrial', 'DescribeTrialComponent', 'DescribeUserProfile', 'DescribeWorkforce', 'DescribeWorkteam', 'GetDeployments', 'GetDeviceFleetReport', 'GetDeviceRegistration', 'GetLineageGroupPolicy', 'GetModelPackageGroupPolicy', 'GetRecord', 'GetResourcePolicy', 'GetSagemakerServicecatalogPortfolioStatus', 'GetScalingConfigurationRecommendation', 'GetSearchSuggestions', 'InvokeEndpoint', 'InvokeEndpointAsync', 'InvokeEndpointWithResponseStream', 'RenderUiTemplate', 'Search', 'SearchTrainingPlanOfferings' ], List: [ 'ListActions', 'ListAlgorithms', 'ListAliases', 'ListAppImageConfigs', 'ListApps', 'ListArtifacts', 'ListAssociations', 'ListAutoMLJobs', 'ListCandidatesForAutoMLJob', 'ListClusterEvents', 'ListClusterNodes', 'ListClusterSchedulerConfigs', 'ListClusters', 'ListCodeRepositories', 'ListCompilationJobs', 'ListComputeQuotas', 'ListContexts', 'ListDataQualityJobDefinitions', 'ListDeviceFleets', 'ListDevices', 'ListDomains', 'ListEdgeDeploymentPlans', 'ListEdgePackagingJobs', 'ListEndpointConfigs', 'ListEndpoints', 'ListExperiments', 'ListFeatureGroups', 'ListFlowDefinitions', 'ListHubContentVersions', 'ListHubContents', 'ListHubs', 'ListHumanLoops', 'ListHumanTaskUis', 'ListHyperParameterTuningJobs', 'ListImageVersions', 'ListImages', 'ListInferenceComponents', 'ListInferenceExperiments', 'ListInferenceRecommendationsJobSteps', 'ListInferenceRecommendationsJobs', 'ListLabelingJobs', 'ListLabelingJobsForWorkteam', 'ListLineageGroups', 'ListMlflowApps', 'ListMlflowTrackingServers', 'ListModelBiasJobDefinitions', 'ListModelCardExportJobs', 'ListModelCardVersions', 'ListModelCards', 'ListModelExplainabilityJobDefinitions', 'ListModelMetadata', 'ListModelPackageGroups', 'ListModelPackages', 'ListModelQualityJobDefinitions', 'ListModels', 'ListMonitoringAlertHistory', 'ListMonitoringAlerts', 'ListMonitoringExecutions', 'ListMonitoringSchedules', 'ListNotebookInstanceLifecycleConfigs', 'ListNotebookInstances', 'ListOptimizationJobs', 'ListPartnerApps', 'ListPipelineExecutionSteps', 'ListPipelineExecutions', 'ListPipelineParametersForExecution', 'ListPipelineVersions', 'ListPipelines', 'ListProcessingJobs', 'ListProjects', 'ListResourceCatalogs', 'ListSharedModelEvents', 'ListSharedModelVersions', 'ListSharedModels', 'ListSpaces', 'ListStageDevices', 'ListStudioLifecycleConfigs', 'ListSubscribedWorkteams', 'ListTags', 'ListTrainingJobs', 'ListTrainingJobsForHyperParameterTuningJob', 'ListTrainingPlans', 'ListTransformJobs', 'ListTrialComponents', 'ListTrials', 'ListUltraServersByReservedCapacity', 'ListUserProfiles', 'ListWorkforces', 'ListWorkteams', 'QueryLineage' ] }; } /** * Grants permission to associate a lineage entity (artifact, context, action, experiment, experiment-trial-component) to each other * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddAssociation.html */ toAddAssociation() { return this.to('AddAssociation'); } /** * Grants permission to add or overwrite one or more tags for the specified Amazon SageMaker resource * * Access Level: Tagging * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifTaggingAction() * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AddTags.html */ toAddTags() { return this.to('AddTags'); } /** * Grants permission to associate a trial component with a trial * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AssociateTrialComponent.html */ toAssociateTrialComponent() { return this.to('AssociateTrialComponent'); } /** * Grants permission to attach an Amazon EBS volume to a SageMaker HyperPod cluster node * * Access Level: Write * * Dependent actions: * - ec2:AttachVolume * - ec2:DescribeVolumes * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AttachClusterNodeVolume.html */ toAttachClusterNodeVolume() { return this.to('AttachClusterNodeVolume'); } /** * Grants permission to add multiple nodes at a time to a SageMaker HyperPod cluster * * Access Level: Write * * Dependent actions: * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchAddClusterNodes.html */ toBatchAddClusterNodes() { return this.to('BatchAddClusterNodes'); } /** * Grants permission to batch delete SageMaker HyperPod cluster nodes * * Access Level: Write * * Dependent actions: * - eks:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDeleteClusterNodes.html */ toBatchDeleteClusterNodes() { return this.to('BatchDeleteClusterNodes'); } /** * Grants permission to describe one or more ModelPackages * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_BatchDescribeModelPackage.html */ toBatchDescribeModelPackage() { return this.to('BatchDescribeModelPackage'); } /** * Grants permission to retrieve metrics associated with SageMaker Resources such as Training Jobs or Trial Components * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchGetMetrics() { return this.to('BatchGetMetrics'); } /** * Grants permission to get a batch of records from one or more feature groups * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_feature_store_BatchGetRecord.html */ toBatchGetRecord() { return this.to('BatchGetRecord'); } /** * Grants permission to publish metrics associated with a SageMaker Resource such as a Training Job or Trial Component * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/ */ toBatchPutMetrics() { return this.to('BatchPutMetrics'); } /** * Grants permission to invoke MLflow APIs * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/mlflow.html */ toCallMlflowAppApi() { return this.to('CallMlflowAppApi'); } /** * Grants permission for Partner App SDK to access the Partner App for reading or writing data use cases * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/dg/partner-apps-onboard.html */ toCallPartnerAppApi() { return this.to('CallPartnerAppApi'); } /** * Grants permission to create an action * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAction.html */ toCreateAction() { return this.to('CreateAction'); } /** * Grants permission to create an algorithm * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAlgorithm.html */ toCreateAlgorithm() { return this.to('CreateAlgorithm'); } /** * Grants permission to create an App for a SageMaker UserProfile or Space * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifImageArns() * - .ifImageVersionArns() * - .ifOwnerUserProfileArn() * - .ifSpaceSharingType() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateApp.html */ toCreateApp() { return this.to('CreateApp'); } /** * Grants permission to create an AppImageConfig * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAppImageConfig.html */ toCreateAppImageConfig() { return this.to('CreateAppImageConfig'); } /** * Grants permission to create an artifact * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateArtifact.html */ toCreateArtifact() { return this.to('CreateArtifact'); } /** * Grants permission to create an AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJob.html */ toCreateAutoMLJob() { return this.to('CreateAutoMLJob'); } /** * Grants permission to create a V2 AutoML job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInterContainerTrafficEncryption() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateAutoMLJobV2.html */ toCreateAutoMLJobV2() { return this.to('CreateAutoMLJobV2'); } /** * Grants permission to create a SageMaker HyperPod cluster * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - ec2:DescribeImages * - ec2:DescribeSnapshots * - ec2:ModifyImageAttribute * - ec2:ModifySnapshotAttribute * - eks:AssociateAccessPolicy * - eks:CreateAccessEntry * - eks:DeleteAccessEntry * - eks:DescribeAccessEntry * - eks:DescribeCluster * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCluster.html */ toCreateCluster() { return this.to('CreateCluster'); } /** * Grants permission to create a cluster scheduler config * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateClusterSchedulerConfig.html */ toCreateClusterSchedulerConfig() { return this.to('CreateClusterSchedulerConfig'); } /** * Grants permission to create a CodeRepository * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCodeRepository.html */ toCreateCodeRepository() { return this.to('CreateCodeRepository'); } /** * Grants permission to create a compilation job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateCompilationJob.html */ toCreateCompilationJob() { return this.to('CreateCompilationJob'); } /** * Grants permission to create a compute quota * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - eks:AssociateAccessPolicy * - eks:DescribeCluster * - eks:ListAssociatedAccessPolicies * - sagemaker:AddTags * - sagemaker:DescribeCluster * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateComputeQuota.html */ toCreateComputeQuota() { return this.to('CreateComputeQuota'); } /** * Grants permission to create a context * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateContext.html */ toCreateContext() { return this.to('CreateContext'); } /** * Grants permission to create a data quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDataQualityJobDefinition.html */ toCreateDataQualityJobDefinition() { return this.to('CreateDataQualityJobDefinition'); } /** * Grants permission to create a device fleet * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDeviceFleet.html */ toCreateDeviceFleet() { return this.to('CreateDeviceFleet'); } /** * Grants permission to create a Domain for SageMaker Studio * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAppNetworkAccessType() * - .ifInstanceTypes() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDomainSharingOutputKmsKey() * - .ifVolumeKmsKey() * - .ifImageArns() * - .ifImageVersionArns() * * Dependent actions: * - iam:CreateServiceLinkedRole * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateDomain.html */ toCreateDomain() { return this.to('CreateDomain'); } /** * Grants permission to create an edge deployment plan * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentPlan.html */ toCreateEdgeDeploymentPlan() { return this.to('CreateEdgeDeploymentPlan'); } /** * Grants permission to create an edge deployment stage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgeDeploymentStage.html */ toCreateEdgeDeploymentStage() { return this.to('CreateEdgeDeploymentStage'); } /** * Grants permission to create an edge packaging job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEdgePackagingJob.html */ toCreateEdgePackagingJob() { return this.to('CreateEdgePackagingJob'); } /** * Grants permission to create an endpoint using the endpoint configuration specified in the request * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpoint.html */ toCreateEndpoint() { return this.to('CreateEndpoint'); } /** * Grants permission to create an endpoint configuration that can be deployed using Amazon SageMaker hosting services * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifInstanceTypes() * - .ifModelArn() * - .ifVolumeKmsKey() * - .ifServerlessMaxConcurrency() * - .ifServerlessMemorySize() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateEndpointConfig.html */ toCreateEndpointConfig() { return this.to('CreateEndpointConfig'); } /** * Grants permission to create an experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateExperiment.html */ toCreateExperiment() { return this.to('CreateExperiment'); } /** * Grants permission to create a feature group * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFeatureGroupOnlineStoreKmsKey() * - .ifFeatureGroupOfflineStoreKmsKey() * - .ifFeatureGroupOfflineStoreS3Uri() * - .ifFeatureGroupEnableOnlineStore() * - .ifFeatureGroupOfflineStoreConfig() * - .ifFeatureGroupDisableGlueTableCreation() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFeatureGroup.html */ toCreateFeatureGroup() { return this.to('CreateFeatureGroup'); } /** * Grants permission to create a flow definition, which defines settings for a human workflow * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateFlowDefinition.html */ toCreateFlowDefinition() { return this.to('CreateFlowDefinition'); } /** * Grants permission to create a hub * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHub.html */ toCreateHub() { return this.to('CreateHub'); } /** * Grants permission to generate S3 presigned URLs with GetObject permission for accessing model artifacts * * Access Level: Read * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentPresignedUrls.html */ toCreateHubContentPresignedUrls() { return this.to('CreateHubContentPresignedUrls'); } /** * Grants permission to create hub content reference * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHubContentReference.html */ toCreateHubContentReference() { return this.to('CreateHubContentReference'); } /** * Grants permission to define the settings you will use for the human review workflow user interface * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHumanTaskUi.html */ toCreateHumanTaskUi() { return this.to('CreateHumanTaskUi'); } /** * Grants permission to create a hyper parameter tuning job that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifFileSystemAccessMode() * - .ifFileSystemDirectoryPath() * - .ifFileSystemId() * - .ifFileSystemType() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateHyperParameterTuningJob.html */ toCreateHyperParameterTuningJob() { return this.to('CreateHyperParameterTuningJob'); } /** * Grants permission to create a SageMaker Image * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImage.html */ toCreateImage() { return this.to('CreateImage'); } /** * Grants permission to create a SageMaker ImageVersion * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateImageVersion.html */ toCreateImageVersion() { return this.to('CreateImageVersion'); } /** * Grants permission to create an inference component on an endpoint * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelArn() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceComponent.html */ toCreateInferenceComponent() { return this.to('CreateInferenceComponent'); } /** * Grants permission to create an inference experiment * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceExperiment.html */ toCreateInferenceExperiment() { return this.to('CreateInferenceExperiment'); } /** * Grants permission to create an inference recommendations job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateInferenceRecommendationsJob.html */ toCreateInferenceRecommendationsJob() { return this.to('CreateInferenceRecommendationsJob'); } /** * Grants permission to start a labeling job. A labeling job takes unlabeled data in and produces labeled data as output, which can be used for training SageMaker models * * Access Level: Write * * Possible conditions: * - .ifWorkteamArn() * - .ifWorkteamType() * - .ifVolumeKmsKey() * - .ifOutputKmsKey() * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateLabelingJob.html */ toCreateLabelingJob() { return this.to('CreateLabelingJob'); } /** * Grants permission to create a lineage group policy * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/Welcome.html */ toCreateLineageGroupPolicy() { return this.to('CreateLineageGroupPolicy'); } /** * Grants permission to create an MLflow app * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMlflowApp.html */ toCreateMlflowApp() { return this.to('CreateMlflowApp'); } /** * Grants permission to create an MLflow tracking server * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMlflowTrackingServer.html */ toCreateMlflowTrackingServer() { return this.to('CreateMlflowTrackingServer'); } /** * Grants permission to create a model in Amazon SageMaker. In the request, you specify a name for the model and describe one or more containers * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifNetworkIsolation() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * - .ifDirectGatedModelAccess() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModel.html */ toCreateModel() { return this.to('CreateModel'); } /** * Grants permission to create a model bias job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelBiasJobDefinition.html */ toCreateModelBiasJobDefinition() { return this.to('CreateModelBiasJobDefinition'); } /** * Grants permission to create a model card * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCard.html */ toCreateModelCard() { return this.to('CreateModelCard'); } /** * Grants permission to create an export job for a model card * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelCardExportJob.html */ toCreateModelCardExportJob() { return this.to('CreateModelCardExportJob'); } /** * Grants permission to create a model explainability job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelExplainabilityJobDefinition.html */ toCreateModelExplainabilityJobDefinition() { return this.to('CreateModelExplainabilityJobDefinition'); } /** * Grants permission to create a ModelPackage * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifModelApprovalStatus() * - .ifCustomerMetadataProperties() * - .ifModelLifeCycle() * - .ifModelLifeCycle() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackage.html */ toCreateModelPackage() { return this.to('CreateModelPackage'); } /** * Grants permission to create a ModelPackageGroup * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelPackageGroup.html */ toCreateModelPackageGroup() { return this.to('CreateModelPackageGroup'); } /** * Grants permission to create a model quality job definition * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateModelQualityJobDefinition.html */ toCreateModelQualityJobDefinition() { return this.to('CreateModelQualityJobDefinition'); } /** * Grants permission to create a monitoring schedule * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifInstanceTypes() * - .ifInterContainerTrafficEncryption() * - .ifMaxRuntimeInSeconds() * - .ifNetworkIsolation() * - .ifOutputKmsKey() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateMonitoringSchedule.html */ toCreateMonitoringSchedule() { return this.to('CreateMonitoringSchedule'); } /** * Grants permission to create an Amazon SageMaker notebook instance. A notebook instance is an Amazon EC2 instance running on a Jupyter Notebook * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * - .ifAcceleratorTypes() * - .ifDirectInternetAccess() * - .ifInstanceTypes() * - .ifMinimumInstanceMetadataServiceVersion() * - .ifRootAccess() * - .ifVolumeKmsKey() * - .ifVpcSecurityGroupIds() * - .ifVpcSubnets() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstance.html */ toCreateNotebookInstance() { return this.to('CreateNotebookInstance'); } /** * Grants permission to create a notebook instance lifecycle configuration that can be deployed using Amazon SageMaker * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateNotebookInstanceLifecycleConfig.html */ toCreateNotebookInstanceLifecycleConfig() { return this.to('CreateNotebookInstanceLifecycleConfig'); } /** * Grants permission to create an optimization job * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreateOptimizationJob.html */ toCreateOptimizationJob() { return this.to('CreateOptimizationJob'); } /** * Grants permission to create an Amazon SageMaker Partner AI App * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerApp.html */ toCreatePartnerApp() { return this.to('CreatePartnerApp'); } /** * Grants permission to return a URL that you can use from your browser to connect to the Amazon SageMaker Partner AI App * * Access Level: Write * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePartnerAppPresignedUrl.html */ toCreatePartnerAppPresignedUrl() { return this.to('CreatePartnerAppPresignedUrl'); } /** * Grants permission to create a pipeline * * Access Level: Write * * Possible conditions: * - .ifAwsRequestTag() * - .ifAwsTagKeys() * * Dependent actions: * - iam:PassRole * - sagemaker:AddTags * * https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_CreatePipeline.html */