Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Default AmazonSageMakerExecution Role missing permission to execute clean-up #9

Open
acere opened this issue Aug 8, 2021 · 2 comments

Comments

@acere
Copy link
Contributor

acere commented Aug 8, 2021

The default AmazonSageMakerExecution is missing permissions to list and delete the stacks created by the SageMaker project. In particular, it is missing the following:

"cloudformation:DeleteStack"
"cloudformation:DescribeStacks"

The default role is also missing

"s3:ListBucketVersions"

necessary delete all objects in the artifact bucket.

@brightsparc
Copy link
Contributor

The BUILD.md page lists additional profile configuration required to run the CDK and other functions within the notebook.

@acere
Copy link
Contributor Author

acere commented Aug 10, 2021

The user running the notebook might have used the quick-start route and not have looked into the BUILD.md instructions. It might be useful to add a note in the notebook to indicate that these permissions are necessary to be able to perform the cleanup.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants