private createSageMakerTrainingRole()

in infra/stack/mlops/mlops-pipeline-stack.ts [248:266]


    private createSageMakerTrainingRole(baseName: string): iam.Role {
        const role = new iam.Role(this, `${baseName}SageMakerTrainingRole`, {
            roleName: `${this.projectPrefix}-${baseName}SageMakerTrainingRole`,
            assumedBy: new iam.ServicePrincipal('sagemaker.amazonaws.com'),
        });

        role.addToPolicy(new iam.PolicyStatement({
            effect: iam.Effect.ALLOW,
            actions: [
                "s3:ListBucket",
                "s3:*Object"
            ],
            resources: [
                '*'
            ]
        }));

        return role;
    }