Skip to content

Commit 34eed21

Browse files
author
judy
authored
Updated Application Auto Scaling pass role policy (#1054)
Small updates to the Application Auto Scaling permissions configuration in the stand-alone tutorial based on updates in the controller ReadMe (aws-controllers-k8s/sagemaker-controller@194bee0) Description of changes: By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
1 parent 9ab596f commit 34eed21

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

docs/content/docs/tutorials/autoscaling-example.md

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -87,7 +87,13 @@ printf '{
8787
' > ./trust.json
8888
```
8989

90-
Updating an Application Auto Scaling Scalable Target requires additional permissions. Create a file named `pass_role_policy.json` to create the policy required for the IAM role.
90+
Updating an Application Auto Scaling Scalable Target requires additional permissions. First, create a service-linked role for Application Auto Scaling.
91+
92+
```sh
93+
aws iam create-service-linked-role --aws-service-name sagemaker.application-autoscaling.amazonaws.com
94+
```
95+
96+
Create a file named `pass_role_policy.json` to create the policy required for the IAM role.
9197

9298
```bash
9399
printf '{
@@ -96,7 +102,7 @@ printf '{
96102
{
97103
"Effect": "Allow",
98104
"Action": "iam:PassRole",
99-
"Resource": "*"
105+
"Resource": "arn:aws:iam::'$AWS_ACCOUNT_ID':role/aws-service-role/sagemaker.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_SageMakerEndpoint"
100106
}
101107
]
102108
}

0 commit comments

Comments
 (0)