| iam:PassRole | Admin |
| sagemaker:CreateApp | Admin |
| sagemaker:CreateCluster | Admin |
| sagemaker:CreateCodeRepository | Admin |
| sagemaker:CreateDomain | Admin |
| sagemaker:CreateProject | Admin |
| sagemaker:CreateEndpoint | Admin |
| sagemaker:CreateEndpointConfig | Admin |
| sagemaker:CreateHyperParameterTuningJob | Admin |
| sagemaker:CreateImage | Admin |
| sagemaker:CreateModel | Admin |
| sagemaker:CreateNotebookInstance | Admin |
| sagemaker:CreateNotebookInstanceLifecycleConfig | Admin |
| sagemaker:CreatePipeline | Admin |
| sagemaker:CreatePresignedNotebookInstanceUrl | Admin |
| sagemaker:CreateProcessingJob | Admin |
| sagemaker:CreateTrainingJob | Admin |
| sagemaker:CreateTransformJob | Admin |
| sagemaker:CreateStudioLifecycleConfig | Admin |
| sagemaker:CreateUserProfile | Admin |
| sagemaker:DeleteApp | Admin |
| sagemaker:DeleteCluster | Admin |
| sagemaker:DeleteCodeRepository | Admin |
| sagemaker:DeleteDomain | Admin |
| sagemaker:DeleteProject | Admin |
| sagemaker:DeleteEndpoint | Admin |
| sagemaker:DeleteEndpointConfig | Admin |
| sagemaker:DeleteModel | Admin |
| sagemaker:DeleteNotebookInstance | Admin |
| sagemaker:DeleteNotebookInstanceLifecycleConfig | Admin |
| sagemaker:DeleteProcessingJob | Admin |
| sagemaker:DeleteImage | Admin |
| sagemaker:DeleteUserProfile | Admin |
| sagemaker:DeleteStudioLifecycleConfig | Admin |
| sagemaker:DeletePipeline | Admin |
| sagemaker:UpdateCluster | Admin |
| sagemaker:UpdateCodeRepository | Admin |
| sagemaker:UpdateDomain | Admin |
| sagemaker:UpdateProject | Admin |
| sagemaker:UpdateEndpoint | Admin |
| sagemaker:UpdateEndpointWeightsAndCapacities | Admin |
| sagemaker:UpdateImage | Admin |
| sagemaker:UpdateNotebookInstance | Admin |
| sagemaker:UpdateNotebookInstanceLifecycleConfig | Admin |
| sagemaker:UpdatePipeline | Admin |
| sagemaker:UpdateUserProfile | Admin |
| sagemaker:AddTags | Operator |
| sagemaker:DeleteTags | Operator |
| sagemaker:InvokeEndpoint | Operator |
| sagemaker:RetryPipelineExecution | Operator |
| sagemaker:StartNotebookInstance | Operator |
| sagemaker:StartPipelineExecution | Operator |
| sagemaker:StopHyperParameterTuningJob | Operator |
| sagemaker:StopNotebookInstance | Operator |
| sagemaker:StopPipelineExecution | Operator |
| sagemaker:StopProcessingJob | Operator |
| sagemaker:StopTrainingJob | Operator |
| sagemaker:StopTransformJob | Operator |
| sagemaker:UpdatePipelineExecution | Operator |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| iam:ListRoles | Metadata |
| kms:ListAliases | Metadata |
| sagemaker:DescribeApp | Metadata |
| sagemaker:DescribeCluster | Metadata |
| sagemaker:DescribeCodeRepository | Metadata |
| sagemaker:DescribeDomain | Metadata |
| sagemaker:DescribeEndpoint | Metadata |
| sagemaker:DescribeEndpointConfig | Metadata |
| sagemaker:DescribeHyperParameterTuningJob | Metadata |
| sagemaker:DescribeModel | Metadata |
| sagemaker:DescribeNotebookInstance | Metadata |
| sagemaker:DescribeNotebookInstanceLifecycleConfig | Metadata |
| sagemaker:DescribePipeline | Metadata |
| sagemaker:DescribePipelineDefinitionForExecution | Metadata |
| sagemaker:DescribePipelineExecution | Metadata |
| sagemaker:DescribeProcessingJob | Metadata |
| sagemaker:DescribeImage | Metadata |
| sagemaker:DescribeTrainingJob | Metadata |
| sagemaker:DescribeTransformJob | Metadata |
| sagemaker:DescribeStudioLifecycleConfig | Metadata |
| sagemaker:DescribeUserProfile | Metadata |
| sagemaker:ListApps | Metadata |
| sagemaker:ListClusters | Metadata |
| sagemaker:ListCodeRepositories | Metadata |
| sagemaker:ListDomains | Metadata |
| sagemaker:ListEndpointConfigs | Metadata |
| sagemaker:ListEndpoints | Metadata |
| sagemaker:ListHyperParameterTuningJobs | Metadata |
| sagemaker:ListModels | Metadata |
| sagemaker:ListNotebookInstanceLifecycleConfigs | Metadata |
| sagemaker:ListNotebookInstances | Metadata |
| sagemaker:ListPipelineExecutions | Metadata |
| sagemaker:ListPipelineExecutionSteps | Metadata |
| sagemaker:ListPipelineParametersForExecution | Metadata |
| sagemaker:ListPipelines | Metadata |
| sagemaker:ListImages | Metadata |
| sagemaker:ListTags | Metadata |
| sagemaker:ListProcessingJobs | Metadata |
| sagemaker:ListTrainingJobs | Metadata |
| sagemaker:ListTrainingJobsForHyperParameterTuningJob | Metadata |
| sagemaker:ListTransformJobs | Metadata |
| sagemaker:ListUserProfiles | Metadata |
| sagemaker:ListStudioLifecycleConfigs | Metadata |
