翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
SageMakerStudioAdminIAMConsolePolicy
説明: および SDK を介して Amazon SageMaker Unified Studio の初期管理 AWS マネジメントコンソール 権限と個々のセットアップ権限を提供します。SageMaker Unified Studio Portal の起動を許可します。
SageMakerStudioAdminIAMConsolePolicy は AWS マネージドポリシーです。
このポリシーを使用すると
ユーザー、グループおよびロールに SageMakerStudioAdminIAMConsolePolicy をアタッチできます。
ポリシーの詳細
-
タイプ: AWS 管理ポリシー
-
作成日時: 2025 年 8 月 18 日 22:49 UTC
-
編集日時: 2025 年 11 月 14 日 22:49 UTC
-
ARN:
arn:aws:iam::aws:policy/SageMakerStudioAdminIAMConsolePolicy
ポリシーのバージョン
ポリシーのバージョン: v2 (デフォルト)
ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを決定します。
JSON ポリシードキュメント
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AmazonDataZoneStatement", "Effect" : "Allow", "Action" : [ "datazone:*" ], "Resource" : [ "*" ] }, { "Sid" : "ReadOnlyStatement", "Effect" : "Allow", "Action" : [ "iam:ListRoles", "iam:GetRole", "iam:GetUser" ], "Resource" : [ "*" ] }, { "Sid" : "IAMPassRoleStatement", "Effect" : "Allow", "Action" : "iam:PassRole", "Resource" : [ "arn:aws:iam::*:role/service-role/AmazonSageMaker*" ], "Condition" : { "StringEquals" : { "iam:passedToService" : "datazone.amazonaws.com" } } }, { "Sid" : "SSMParameterStatement", "Effect" : "Allow", "Action" : [ "ssm:GetParameter", "ssm:GetParametersByPath", "ssm:PutParameter", "ssm:DeleteParameter" ], "Resource" : [ "arn:aws:ssm:*:*:parameter/amazon/datazone/q*" ] }, { "Sid" : "DescribeEc2Permissions", "Effect" : "Allow", "Action" : [ "ec2:DescribeVpcs", "ec2:DescribeSubnets", "ec2:DescribeSecurityGroups", "ec2:DescribeInternetGateways", "ec2:DescribeAddresses", "ec2:DescribeNatGateways", "ec2:DescribeRouteTables", "ec2:DescribeVpcEndpoints", "ec2:DescribeVpcEndpointServices", "ec2:DescribeAvailabilityZones" ], "Resource" : "*" }, { "Sid" : "CreateTaggedEc2Resources", "Effect" : "Allow", "Action" : [ "ec2:CreateVpc" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateTaggedSubnet", "Effect" : "Allow", "Action" : [ "ec2:CreateSubnet" ], "Resource" : [ "arn:aws:ec2:*:*:subnet/*", "arn:aws:ec2:*:*:vpc/*" ], "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateSubnetInTaggedVPC", "Effect" : "Allow", "Action" : [ "ec2:CreateSubnet" ], "Resource" : "arn:aws:ec2:*:*:vpc/*", "Condition" : { "StringEquals" : { "aws:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateTaggedSecurityGroup", "Effect" : "Allow", "Action" : [ "ec2:CreateSecurityGroup" ], "Resource" : [ "arn:aws:ec2:*:*:security-group/*" ], "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateTaggedSecurityGroupInVPC", "Effect" : "Allow", "Action" : [ "ec2:CreateSecurityGroup" ], "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc/*" ], "Condition" : { "StringEquals" : { "aws:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateTaggedVPCEndpoint", "Effect" : "Allow", "Action" : [ "ec2:CreateVpcEndpoint" ], "Resource" : [ "arn:aws:ec2:*:*:vpc-endpoint/*" ], "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateVPCEndpointInTaggedResources", "Effect" : "Allow", "Action" : [ "ec2:CreateVpcEndpoint" ], "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc/*", "arn:aws:ec2:*:*:subnet/*", "arn:aws:ec2:*:*:route-table/*" ], "Condition" : { "StringEquals" : { "aws:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateInternetGateway", "Effect" : "Allow", "Action" : [ "ec2:CreateInternetGateway" ], "Resource" : "arn:aws:ec2:*:*:internet-gateway/*", "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateTaggedNatGateway", "Effect" : "Allow", "Action" : [ "ec2:CreateNatGateway" ], "Resource" : [ "arn:aws:ec2:*:*:natgateway/*" ], "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateNatGatewayInTaggedSubnet", "Effect" : "Allow", "Action" : [ "ec2:CreateNatGateway" ], "Resource" : [ "arn:aws:ec2:*:*:subnet/*", "arn:aws:ec2:*:*:elastic-ip/*" ], "Condition" : { "StringEquals" : { "aws:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateTaggedRouteTable", "Effect" : "Allow", "Action" : [ "ec2:CreateRouteTable" ], "Resource" : [ "arn:aws:ec2:*:*:route-table/*" ], "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateRouteTableInTaggedSubnet", "Effect" : "Allow", "Action" : [ "ec2:CreateRouteTable" ], "Resource" : [ "arn:aws:ec2:*:*:vpc/*" ], "Condition" : { "StringEquals" : { "aws:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "AllocateAddress", "Effect" : "Allow", "Action" : [ "ec2:AllocateAddress" ], "Resource" : "arn:aws:ec2:*:*:elastic-ip/*", "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "ModifyTaggedEc2Resources", "Effect" : "Allow", "Action" : [ "ec2:ModifyVpcAttribute", "ec2:AuthorizeSecurityGroupIngress", "ec2:AuthorizeSecurityGroupEgress", "ec2:RevokeSecurityGroupEgress", "ec2:RevokeSecurityGroupIngress" ], "Resource" : "*", "Condition" : { "StringEquals" : { "ec2:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "AttachInternetGateway", "Effect" : "Allow", "Action" : [ "ec2:AttachInternetGateway" ], "Resource" : [ "arn:aws:ec2:*:*:internet-gateway/*", "arn:aws:ec2:*:*:vpc/*" ], "Condition" : { "StringEquals" : { "ec2:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "CreateRoute", "Effect" : "Allow", "Action" : [ "ec2:CreateRoute" ], "Resource" : [ "arn:aws:ec2:*:*:route-table/*" ], "Condition" : { "StringEquals" : { "ec2:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "AssociateRouteTable", "Effect" : "Allow", "Action" : [ "ec2:AssociateRouteTable" ], "Resource" : [ "arn:aws:ec2:*:*:route-table/*", "arn:aws:ec2:*:*:subnet/*" ], "Condition" : { "StringEquals" : { "ec2:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "Ec2TaggingOperations", "Effect" : "Allow", "Action" : "ec2:CreateTags", "Resource" : "*", "Condition" : { "StringEquals" : { "ec2:CreateAction" : [ "CreateVpc", "CreateSubnet", "CreateSecurityGroup", "CreateInternetGateway", "CreateNatGateway", "CreateRouteTable", "CreateVpcEndpoint" ], "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "Ec2TagEIP", "Effect" : "Allow", "Action" : "ec2:CreateTags", "Resource" : "arn:aws:ec2:*:*:elastic-ip/*", "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "AllowCFNStackCreation", "Effect" : "Allow", "Action" : [ "cloudformation:ListStacks", "cloudformation:ListStackResources", "cloudformation:CreateStack", "cloudformation:GetTemplateSummary", "cloudformation:DescribeStacks", "cloudformation:DescribeStackEvents" ], "Resource" : "*" }, { "Sid" : "DeleteTaggedVpcResources", "Effect" : "Allow", "Action" : [ "ec2:DeleteVpc", "ec2:DeleteSubnet", "ec2:DeleteSecurityGroup", "ec2:DeleteInternetGateway", "ec2:DetachInternetGateway", "ec2:DeleteNatGateway", "ec2:DisassociateRouteTable", "ec2:DeleteVpcEndpoints", "ec2:DeleteRouteTable", "ec2:DeleteRoute", "ec2:ReleaseAddress" ], "Resource" : "*", "Condition" : { "StringEquals" : { "ec2:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "DeleteTagsOnTaggedResources", "Effect" : "Allow", "Action" : "ec2:DeleteTags", "Resource" : "*", "Condition" : { "StringEquals" : { "ec2:ResourceTag/CreatedForUseWithSageMakerUnifiedStudio" : "true" } } }, { "Sid" : "S3ReadCFNTemplate", "Effect" : "Allow", "Action" : [ "s3:GetObject" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:CalledViaFirst" : "cloudformation.amazonaws.com" }, "StringNotEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "KMSReadPermissions", "Effect" : "Allow", "Action" : [ "kms:DescribeKey", "kms:ListAliases" ], "Resource" : "*" }, { "Sid" : "DataZoneKMSPermissions", "Effect" : "Allow", "Action" : [ "kms:Decrypt", "kms:GenerateDataKey" ], "Resource" : "*", "Condition" : { "StringLike" : { "kms:ViaService" : "datazone.*.amazonaws.com" }, "ForAnyValue:StringEquals" : { "kms:EncryptionContextKeys" : "aws:datazone:domainId" } } }, { "Sid" : "DataZoneKMSGrantPermissions", "Effect" : "Allow", "Action" : [ "kms:CreateGrant" ], "Resource" : "*", "Condition" : { "StringLike" : { "kms:ViaService" : "datazone.*.amazonaws.com" }, "Bool" : { "kms:GrantIsForAWSResource" : "true" }, "ForAnyValue:StringEquals" : { "kms:EncryptionContextKeys" : "aws:datazone:domainId" } } } ] }
詳細はこちら
