sagemaker:CreateProcessingJob is a Write access-level action in the sagemaker service. Grants permission to start a processing job. After processing completes, Amazon SageMaker saves the resulting artifacts and other optional output to an Amazon S3 location that you specify
ARNs that sagemaker:CreateProcessingJob can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants sagemaker:CreateProcessingJob.
Filters access by a key that is present in the request the user makes to the SageMaker service
Filters access by the list of all the tag key names associated with the resource in the request
Filters access by the list of all instance types associated with the resource in the request
Filters access by the inter container traffic encryption associated with the resource in the request
Filters access by the max runtime in seconds associated with the resource in the request
Filters access by the network isolation associated with the resource in the request
Filters access by the output kms key associated with the resource in the request. The ARN of the key-id must be used
Filters access by the volume kms key associated with the resource in the request. The ARN of the key-id must be used
Filters access by the list of all VPC security group ids associated with the resource in the request
Filters access by the list of all VPC subnets associated with the resource in the request
Filters access by a tag key and value pair
Filters access by a tag key and value pair
A minimal policy that allows sagemaker:CreateProcessingJob. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowSagemakerCreateProcessingJob",
"Effect": "Allow",
"Action": "sagemaker:CreateProcessingJob",
"Resource": "*"
}
]
}