more permissions

kukushking · kukushking · commit bd26b5b8df05 · 2025-08-07T21:42:40.000+01:00
diff --git a/modules/sagemaker/sagemaker-studio/helper_constructs/sm_roles.py b/modules/sagemaker/sagemaker-studio/helper_constructs/sm_roles.py
@@ -327,9 +327,14 @@ def __init__(
                         iam.PolicyStatement(
                             effect=iam.Effect.ALLOW,
                             actions=[
+                                "sagemaker:DescribeImage",
                                 "sagemaker:DescribeImageVersion",
+                                "sagemaker:ListImageVersions",
+                            ],
+                            resources=[
+                                f"arn:{Aws.PARTITION}:sagemaker:{Aws.REGION}:{Aws.ACCOUNT_ID}:image/*"
+                                f"arn:{Aws.PARTITION}:sagemaker:{Aws.REGION}:{Aws.ACCOUNT_ID}:image-version/*/*"
                             ],
-                            resources=[f"arn:{Aws.PARTITION}:sagemaker:{Aws.REGION}:{Aws.ACCOUNT_ID}:image-version/*"],
                         )
                     ]
                 )

Original file line number	Diff line number	Diff line change
`@@ -327,9 +327,14 @@ def __init__(`
`327`	`327`	`iam.PolicyStatement(`
`328`	`328`	`effect=iam.Effect.ALLOW,`
`329`	`329`	`actions=[`
	`330`	`+ "sagemaker:DescribeImage",`
`330`	`331`	`"sagemaker:DescribeImageVersion",`
	`332`	`+ "sagemaker:ListImageVersions",`
	`333`	`+ ],`
	`334`	`+ resources=[`
	`335`	`+ f"arn:{Aws.PARTITION}:sagemaker:{Aws.REGION}:{Aws.ACCOUNT_ID}:image/*"`
	`336`	`+ f"arn:{Aws.PARTITION}:sagemaker:{Aws.REGION}:{Aws.ACCOUNT_ID}:image-version//"`
`331`	`337`	`],`
`332`		`- resources=[f"arn:{Aws.PARTITION}:sagemaker:{Aws.REGION}:{Aws.ACCOUNT_ID}:image-version/*"],`
`333`	`338`	`)`
`334`	`339`	`]`
`335`	`340`	`)`