本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
AmazonDataZoneSageMakerManageAccessRole-<region>-<domainId>
AmazonDataZoneSageMakerManageAccessRole
角色具有 AmazonDataZoneSageMakerAccess
、 AmazonDataZoneRedshiftManageAccessRolePolicy
和 AmazonDataZoneGlueManageAccessRolePolicy
連接的 。此角色授予 Amazon DataZone 發佈和管理資料湖、資料倉儲和 Amazon Sagemaker 資產訂閱的許可。
AmazonDataZoneSageMakerManageAccessRole
角色已連接下列內嵌政策:
{ "Version":"2012-10-17", "Statement":[ { "Sid": "RedshiftSecretStatement", "Effect":"Allow", "Action":"secretsmanager:GetSecretValue", "Resource":"*", "Condition":{ "StringEquals":{ "secretsmanager:ResourceTag/AmazonDataZoneDomain":"{{domainId}}" } } } ] }
AmazonDataZoneSageMakerManageAccessRole
角色已連接下列信任政策:
{ "Version": "2012-10-17", "Statement": [ { "Sid": "DatazoneTrustPolicyStatement", "Effect": "Allow", "Principal": { "Service": ["datazone.amazonaws.com", "sagemaker.amazonaws.com"] }, "Action": "sts:AssumeRole", "Condition": { "StringEquals": { "aws:SourceAccount": "{{domain_account}}" }, "ArnEquals": { "aws:SourceArn": "arn:aws:datazone:{{region}}:{{domain_account}}:domain/{{root_domain_id}}" } } } ] }