amazon-sagemaker-drift-detection
amazon-sagemaker-drift-detection copied to clipboard
Default AmazonSageMakerExecution Role missing permission to execute clean-up
trafficstars
The default AmazonSageMakerExecution is missing permissions to list and delete the stacks created by the SageMaker project. In particular, it is missing the following:
"cloudformation:DeleteStack"
"cloudformation:DescribeStacks"
The default role is also missing
"s3:ListBucketVersions"
necessary delete all objects in the artifact bucket.
The BUILD.md page lists additional profile configuration required to run the CDK and other functions within the notebook.
The user running the notebook might have used the quick-start route and not have looked into the BUILD.md instructions. It might be useful to add a note in the notebook to indicate that these permissions are necessary to be able to perform the cleanup.