in infra/stack/mlops/mlops-pipeline-stack.ts [248:266]
private createSageMakerTrainingRole(baseName: string): iam.Role {
const role = new iam.Role(this, `${baseName}SageMakerTrainingRole`, {
roleName: `${this.projectPrefix}-${baseName}SageMakerTrainingRole`,
assumedBy: new iam.ServicePrincipal('sagemaker.amazonaws.com'),
});
role.addToPolicy(new iam.PolicyStatement({
effect: iam.Effect.ALLOW,
actions: [
"s3:ListBucket",
"s3:*Object"
],
resources: [
'*'
]
}));
return role;
}