comprehend:CreateFlywheel is a Write access-level action in the comprehend service. Grants permission to create a new flywheel that you can use to train model versions
ARNs that comprehend:CreateFlywheel can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants comprehend:CreateFlywheel.
Filters access by requiring tag value associated with the resource
Filters access by requiring tag values present in a resource creation request
Filters access by requiring the presence of mandatory tags in the request
Filters access by the DataLake Kms Key associated with the flywheel resource in the request
Filters access by the model KMS key associated with the resource in the request
Filters access by the volume KMS key associated with the resource in the request
Filters access by the list of all VPC security group ids associated with the resource in the request
Filters access by the list of all VPC subnets associated with the resource in the request
A minimal policy that allows comprehend:CreateFlywheel. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowComprehendCreateFlywheel",
"Effect": "Allow",
"Action": "comprehend:CreateFlywheel",
"Resource": "*"
}
]
}