Topic 1 Question 77
A data engineer is configuring Amazon SageMaker Studio to use AWS Glue interactive sessions to prepare data for machine learning (ML) models. The data engineer receives an access denied error when the data engineer tries to prepare the data by using SageMaker Studio. Which change should the engineer make to gain access to SageMaker Studio?
Add the AWSGlueServiceRole managed policy to the data engineer's IAM user.
Add a policy to the data engineer's IAM user that includes the sts:AssumeRole action for the AWS Glue and SageMaker service principals in the trust policy.
Add the AmazonSageMakerFullAccess managed policy to the data engineer's IAM user.
Add a policy to the data engineer's IAM user that allows the sts:AddAssociation action for the AWS Glue and SageMaker service principals in the trust policy.
ユーザの投票
コメント(11)
- 正解だと思う選択肢: B
I don't believe you're supposed to assign a FullAccess policy, so I will go with B.
👍 6tgv2024/05/28 - 正解だと思う選択肢: B
I will go with B since you can get access denied even with the AmazonSageMakerFullAccess. See here: https://stackoverflow.com/questions/64709871/aws-sagemaker-studio-createdomain-access-error
👍 5GiorgioGss2024/03/19 - 正解だと思う選択肢: C
Amazon SageMaker requires permissions to perform actions on your behalf. By attaching the AmazonSageMakerFullAccess managed policy to the data engineer’s IAM user, you grant the necessary permissions for SageMaker Studio to access AWS Glue and other related services.
👍 3rralucard_2024/02/02
シャッフルモード