本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
AmazonSageMakerEdgeDeviceFleetPolicy
描述:提供 SageMaker Edge 使用默认云连接为客户创建和管理设备队列所需的权限。
AmazonSageMakerEdgeDeviceFleetPolicy
是一项 AWS 托管式策略。
使用此策略
您可以将 AmazonSageMakerEdgeDeviceFleetPolicy
附加到您的用户、组和角色。
策略详细信息
-
类型:服务角色策略
-
创建时间:2020 年 12 月 8 日 16:17 UTC
-
编辑时间:2020 年 12 月 8 日 16:17 UTC
-
ARN:
arn:aws:iam::aws:policy/service-role/AmazonSageMakerEdgeDeviceFleetPolicy
策略版本
策略版本:v1 (默认值)
此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时, AWS 会检查策略的默认版本以确定是否允许该请求。
JSON 策略文档
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "DeviceS3Access", "Effect" : "Allow", "Action" : [ "s3:PutObject", "s3:GetBucketLocation" ], "Resource" : [ "arn:aws:s3:::*SageMaker*", "arn:aws:s3:::*Sagemaker*", "arn:aws:s3:::*sagemaker*" ] }, { "Sid" : "SageMakerEdgeApis", "Effect" : "Allow", "Action" : [ "sagemaker:SendHeartbeat", "sagemaker:GetDeviceRegistration" ], "Resource" : "*" }, { "Sid" : "CreateIoTRoleAlias", "Effect" : "Allow", "Action" : [ "iot:CreateRoleAlias", "iot:DescribeRoleAlias", "iot:UpdateRoleAlias", "iot:ListTagsForResource", "iot:TagResource" ], "Resource" : [ "arn:aws:iot:*:*:rolealias/SageMakerEdge*" ] }, { "Sid" : "CreateIoTRoleAliasIamPermissionsGetRole", "Effect" : "Allow", "Action" : [ "iam:GetRole" ], "Resource" : [ "arn:aws:iam::*:role/*SageMaker*", "arn:aws:iam::*:role/*Sagemaker*", "arn:aws:iam::*:role/*sagemaker*" ] }, { "Sid" : "CreateIoTRoleAliasIamPermissionsPassRole", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : [ "arn:aws:iam::*:role/*SageMaker*", "arn:aws:iam::*:role/*Sagemaker*", "arn:aws:iam::*:role/*sagemaker*" ], "Condition" : { "StringEqualsIfExists" : { "iam:PassedToService" : [ "iot.amazonaws.com", "credentials.iot.amazonaws.com" ] } } } ] }