# IAM roles for Amazon SageMaker Unified Studio
<a name="security-iam-roles"></a>

**Topics**
+ [AmazonSageMakerDomainExecution role](AmazonSageMakerDomainExecution.md)
+ [AmazonSageMakerDomainService role](AmazonSageMakerDomainService.md)
+ [AmazonSageMakerManageAccess-<region>-<domainId> role](AmazonSageMakerManageAccess.md)
+ [AmazonSageMakerProvisioning-<domainAccountId> role](AmazonSageMakerProvisioning.md)
+ [AmazonDataZoneBedrockModelManagementRole](AmazonDataZoneBedrockModelManagementRole.md)
+ [AmazonDataZoneBedrockFMConsumptionRole](AmazonDataZoneBedrockFMConsumptionRole.md)
+ [AmazonSageMakerQueryExecution](AmazonSageMakerQueryExecution.md)