modules/monitoring/templates/roles.yaml [74:124]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        - PolicyName: StatesStartExecutionPolicy
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Effect: Allow
                Action:
                  - "states:*"
                Resource: "*"
        - PolicyName: StatesAccessEventsPolicy
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Effect: Allow
                Action:
                  - "events:*"
                Resource: "*"

  # Define SageMaker Execution Role
  SagerMakerRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service: sagemaker.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - "arn:aws:iam::aws:policy/AmazonSageMakerFullAccess"
        - "arn:aws:iam::aws:policy/AmazonS3FullAccess"
        #- !Ref ModelPolicy
  #ModelPolicy:
  #  Type: AWS::IAM::ManagedPolicy
  #  Properties:
  #    PolicyDocument:
  #      Version: "2012-10-17"
  #      Statement:
  #        - Sid: AllowRWAccessToBucket
  #          Effect: Allow
  #          Action:
  #            - s3:ListBucket
  #            - s3:GetObject
  #            - s3:PutObject
  #            - s3:DeleteObject
  #          Resource:
  #            - !Sub "arn:aws:s3:::${Bucket}"
  #            - !Sub "arn:aws:s3:::${Bucket}/*"

Outputs:
  WorkflowExecutionRoleArn:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



modules/pipeline/templates/roles.yaml [74:124]:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
        - PolicyName: StatesStartExecutionPolicy
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Effect: Allow
                Action:
                  - "states:*"
                Resource: "*"
        - PolicyName: StatesAccessEventsPolicy
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Effect: Allow
                Action:
                  - "events:*"
                Resource: "*"

  # Define SageMaker Execution Role
  SagerMakerRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service: sagemaker.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns:
        - "arn:aws:iam::aws:policy/AmazonSageMakerFullAccess"
        - "arn:aws:iam::aws:policy/AmazonS3FullAccess"
        #- !Ref ModelPolicy
  #ModelPolicy:
  #  Type: AWS::IAM::ManagedPolicy
  #  Properties:
  #    PolicyDocument:
  #      Version: "2012-10-17"
  #      Statement:
  #        - Sid: AllowRWAccessToBucket
  #          Effect: Allow
  #          Action:
  #            - s3:ListBucket
  #            - s3:GetObject
  #            - s3:PutObject
  #            - s3:DeleteObject
  #          Resource:
  #            - !Sub "arn:aws:s3:::${Bucket}"
  #            - !Sub "arn:aws:s3:::${Bucket}/*"

Outputs:
  WorkflowExecutionRoleArn:
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -



