AWS SageMaker studio CreateDomain访问错误

Question

我正在尝试使用快速启动方法设置 sagemaker studio。我有 IAM 角色并AmazonSageMakerFullAccess添加了该角色。选择 VPC/子网后，我收到以下错误，

AccessDeniedException
User: arn:aws:iam::1234567:user/blahblah is not authorized to perform: 
      sagemaker:CreateDomain 
      on resource: arn:aws:sagemaker:us-east-1:2345678:domain/d-hj4oh0jk7g6v

如何解决此访问问题？

Answer 1

将这些策略附加到角色

"Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "kms:CreateGrant",
                "kms:DescribeKey"
            ],
            "Resource": "arn:aws:kms:region:account-id:key/kms-key-id"
        },
    ]

尝试此链接 https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-roles.html https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-roles.html# sagemaker-角色-createdomain-perms，

CreateNotebookInstance API：执行角色权限

这会帮助你...