| iam:PassRole | Admin |
| sagemaker:CreateCodeRepository | Admin |
| sagemaker:CreateDomain | Admin |
| sagemaker:CreateEndpoint | Admin |
| sagemaker:CreateEndpointConfig | Admin |
| sagemaker:CreateHyperParameterTuningJob | Admin |
| sagemaker:CreateModel | Admin |
| sagemaker:CreateNotebookInstance | Admin |
| sagemaker:CreateNotebookInstanceLifecycleConfig | Admin |
| sagemaker:CreatePresignedNotebookInstanceUrl | Admin |
| sagemaker:CreateTrainingJob | Admin |
| sagemaker:CreateTransformJob | Admin |
| sagemaker:CreateUserProfile | Admin |
| sagemaker:DeleteCodeRepository | Admin |
| sagemaker:DeleteDomain | Admin |
| sagemaker:DeleteEndpoint | Admin |
| sagemaker:DeleteEndpointConfig | Admin |
| sagemaker:DeleteModel | Admin |
| sagemaker:DeleteNotebookInstance | Admin |
| sagemaker:DeleteNotebookInstanceLifecycleConfig | Admin |
| sagemaker:DeleteUserProfile | Admin |
| sagemaker:UpdateCodeRepository | Admin |
| sagemaker:UpdateDomain | Admin |
| sagemaker:UpdateEndpoint | Admin |
| sagemaker:UpdateEndpointWeightsAndCapacities | Admin |
| sagemaker:UpdateNotebookInstance | Admin |
| sagemaker:UpdateNotebookInstanceLifecycleConfig | Admin |
| sagemaker:AddTags | Operator |
| sagemaker:DeleteTags | Operator |
| sagemaker:InvokeEndpoint | Operator |
| sagemaker:StartNotebookInstance | Operator |
| sagemaker:StopHyperParameterTuningJob | Operator |
| sagemaker:StopNotebookInstance | Operator |
| sagemaker:StopTrainingJob | Operator |
| sagemaker:StopTransformJob | Operator |
| ec2:DescribeSecurityGroups | Metadata |
| ec2:DescribeSubnets | Metadata |
| ec2:DescribeVpcs | Metadata |
| iam:ListRoles | Metadata |
| kms:ListAliases | Metadata |
| sagemaker:DescribeCodeRepository | Metadata |
| sagemaker:DescribeDomain | Metadata |
| sagemaker:DescribeEndpoint | Metadata |
| sagemaker:DescribeEndpointConfig | Metadata |
| sagemaker:DescribeHyperParameterTuningJob | Metadata |
| sagemaker:DescribeModel | Metadata |
| sagemaker:DescribeNotebookInstance | Metadata |
| sagemaker:DescribeNotebookInstanceLifecycleConfig | Metadata |
| sagemaker:DescribeTrainingJob | Metadata |
| sagemaker:DescribeTransformJob | Metadata |
| sagemaker:ListCodeRepositories | Metadata |
| sagemaker:ListDomains | Metadata |
| sagemaker:ListEndpointConfigs | Metadata |
| sagemaker:ListEndpoints | Metadata |
| sagemaker:ListHyperParameterTuningJobs | Metadata |
| sagemaker:ListModels | Metadata |
| sagemaker:ListNotebookInstanceLifecycleConfigs | Metadata |
| sagemaker:ListNotebookInstances | Metadata |
| sagemaker:ListTags | Metadata |
| sagemaker:ListTrainingJobs | Metadata |
| sagemaker:ListTrainingJobsForHyperParameterTuningJob | Metadata |
| sagemaker:ListTransformJobs | Metadata |
| sagemaker:ListUserProfiles | Metadata |
