sagemaker:CreateApp is a Write access-level action in the sagemaker service. Grants permission to create an App for a SageMaker UserProfile or Space
ARNs that sagemaker:CreateApp can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants sagemaker:CreateApp.
Filters access by a key that is present in the request the user makes to the SageMaker service
Filters access by the list of all the tag key names associated with the resource in the request
Filters access by the list of all image arns associated with the resource in the request
Filters access by the list of all image version arns associated with the resource in the request
Filters access by the list of all instance types associated with the resource in the request
Filters access by the OwnerUserProfile arn associated with the space in the request
Filters access by the sharing type associated with the space in the request
Filters access by the list of lifecycle configuration ARNs associated with the resource in the request
Filters access by a tag key and value pair
Filters access by a tag key and value pair
A minimal policy that allows sagemaker:CreateApp. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSagemakerCreateApp",
"Effect": "Allow",
"Action": "sagemaker:CreateApp",
"Resource": "*"
}
]
}