Fix: add sagemaker:AddTags in StateMachine to fix AccessDeniedException during TrainingJob

kwonyulchoi · kwonyulchoi · commit 6d3e468723fd · 2022-08-09T10:14:03.000+09:00
diff --git a/infra/stack/mlops/mlops-pipeline-stack.ts b/infra/stack/mlops/mlops-pipeline-stack.ts
@@ -314,7 +314,8 @@ export class MLOpsPipelineStack extends base.BaseStack {
                 "sagemaker:CreateTrainingJob",
                 "sagemaker:UpdateEndpoint",
                 "sagemaker:CreateEndpointConfig",
-                "sagemaker:DeleteEndpoint"
+                "sagemaker:DeleteEndpoint",
+                "sagemaker:AddTags"
             ],
             resources: [
                 '*'
