What are the security risks of SageMakerStudioAdminIAMPermissiveExecutionPolicy?

AWS says the policy gives broad access to data resources and full access to all APIs of the services it covers. It also allows role creation, policy attachment and trust policy updates within the AmazonSageMaker role patterns. AWS managed policies do not grant least privilege permissions, and an AWS update to the policy affects every identity it is attached to.

SageMakerStudioAdminIAMPermissiveExecutionPolicy

High privilegeAdminAWS managedActiveReviewedShow on map Compare

Summary

An administrative execution policy for using IAM roles with SageMaker Unified Studio. The SageMaker Unified Studio Administrator Guide says it grants administrative access to provision, manage and access resources in your account, including broad access to data resources.

Permissions imported from the AWS Managed Policy Reference Guide; other sections reviewed against the listed AWS sources.

Identity

ARN: arn:aws:iam::aws:policy/SageMakerStudioAdminIAMPermissiveExecutionPolicy
Default version: v25
Created: 2025-08-18
Last edited: 2026-10-29
Services: airflow, airflow-serverless, application-autoscaling, athena, bedrock, bedrock-agentcore, cloudformation, cloudwatch, codeconnections, codestar-connections, codewhisperer, comprehend, datazone, dynamodb, ec2, ecr, ecr-public, elasticmapreduce, emr-containers, emr-serverless, events, glue, iam, identitystore, kms, lakeformation, logs, organizations, q, quicksight, ram, rds, redshift, redshift-data, redshift-serverless, rekognition, resource-groups, s3, s3tables, sagemaker, sagemaker-data-science-assistant, sagemaker-mlflow, sagemaker-unified-studio-mcp, scheduler, secretsmanager, sqlworkbench, ssm, sso, sts, tag, textract, xray

Control-plane actions (4043)

By access level: 836 List, 143 Permissions management, 1051 Read, 77 Tagging, 1936 Write.

Control-plane actions by service
Service	Granted	Access levels and limits	Granted by
MWAA	All 12 actions (see the MWAA page)	1 List, 2 Read, 2 Tagging, 7 Write; 0 restricted, 0 conditional	airflow:*
MWAA Serverless	All 16 actions (see the MWAA Serverless page)	4 List, 5 Read, 2 Tagging, 5 Write; 0 restricted, 0 conditional	airflow-serverless:*
Application Auto Scaling	All 14 actions (see the Application Auto Scaling page)	1 List, 5 Read, 2 Tagging, 6 Write; 0 restricted, 0 conditional	application-autoscaling:*
Athena	All 86 actions (see the Athena page)	13 List, 35 Read, 2 Tagging, 36 Write; 0 restricted, 0 conditional	athena:*
Bedrock	All 232 actions (see the Bedrock page)	45 List, 1 Permissions management, 61 Read, 2 Tagging, 123 Write; 0 restricted, 0 conditional	bedrock:*
Bedrock-Agentcore	All 197 actions (see the Bedrock-Agentcore page)	38 List, 8 Permissions management, 45 Read, 2 Tagging, 104 Write; 0 restricted, 0 conditional	bedrock-agentcore:*
CloudFormation	All 104 actions (see the CloudFormation page)	23 List, 1 Permissions management, 34 Read, 2 Tagging, 44 Write; 103 restricted, 0 conditional	cloudformation:*, cloudformation:ValidateTemplate
CloudWatch	All 160 actions (see the CloudWatch page)	24 List, 8 Permissions management, 46 Read, 2 Tagging, 80 Write; 0 restricted, 0 conditional	cloudwatch:*
CodeConnections	All 38 actions (see the CodeConnections page)	7 List, 16 Read, 2 Tagging, 13 Write; 0 restricted, 0 conditional	codeconnections:*
CodeStar Connections	All 38 actions (see the CodeStar Connections page)	7 List, 16 Read, 2 Tagging, 13 Write; 0 restricted, 0 conditional	codestar-connections:*
CodeWhisperer	All 19 actions (see the CodeWhisperer page)	5 List, 1 Permissions management, 3 Read, 2 Tagging, 8 Write; 0 restricted, 0 conditional	codewhisperer:*
Comprehend	All 85 actions (see the Comprehend page)	50 Read, 2 Tagging, 33 Write; 0 restricted, 0 conditional	comprehend:*
DataZone	All 278 actions (see the DataZone page)	55 List, 6 Permissions management, 62 Read, 2 Tagging, 153 Write; 0 restricted, 0 conditional	datazone:*
DynamoDB	26 of 68	7 List, 19 Read; 0 restricted, 0 conditional	dynamodb:Describe, dynamodb:List
EC2	208 of 834	195 List, 2 Permissions management, 2 Tagging, 9 Write; 8 restricted, 2 conditional	ec2:AuthorizeSecurityGroupEgress, ec2:AuthorizeSecurityGroupIngress, ec2:CreateNetworkInterface, ec2:CreateNetworkInterfacePermission, ec2:CreateSecurityGroup, ec2:CreateTags, ec2:CreateVpcEndpoint, ec2:DeleteNetworkInterface, ec2:DeleteNetworkInterfacePermission, ec2:DeleteSecurityGroup, ec2:DeleteTags, ec2:Describe* and 2 more
Elastic Container Registry	5 of 65	1 List, 4 Read; 0 restricted, 0 conditional	ecr:BatchCheckLayerAvailability, ecr:BatchGetImage, ecr:DescribeImages, ecr:GetAuthorizationToken, ecr:GetDownloadUrlForLayer
Elastic Container Registry Public	1 of 23	1 Read; 0 restricted, 0 conditional	ecr-public:GetAuthorizationToken
EMR	All 88 actions (see the EMR page)	12 List, 3 Permissions management, 20 Read, 2 Tagging, 51 Write; 0 restricted, 0 conditional	elasticmapreduce:*
EMR Containers	All 25 actions (see the EMR Containers page)	6 List, 5 Read, 2 Tagging, 12 Write; 0 restricted, 0 conditional	emr-containers:*
EMR Serverless	All 25 actions (see the EMR Serverless page)	4 List, 7 Read, 2 Tagging, 12 Write; 0 restricted, 0 conditional	emr-serverless:*
EventBridge	All 71 actions (see the EventBridge page)	15 List, 4 Permissions management, 12 Read, 2 Tagging, 38 Write; 0 restricted, 0 conditional	events:*
Glue	All 306 actions (see the Glue page)	27 List, 36 Permissions management, 93 Read, 2 Tagging, 148 Write; 0 restricted, 0 conditional	glue:*
IAM	10 of 190	2 List, 2 Permissions management, 2 Read, 1 Tagging, 3 Write; 6 restricted, 3 conditional	iam:AttachRolePolicy, iam:CreateRole, iam:CreateServiceLinkedRole, iam:GetRole, iam:GetUser, iam:ListRoles, iam:ListUsers, iam:PassRole, iam:TagRole, iam:UpdateAssumeRolePolicy
Identity Store	2 of 29	2 Read; 2 restricted, 2 conditional	identitystore:DescribeGroup, identitystore:DescribeUser
KMS	10 of 58	2 List, 1 Permissions management, 1 Read, 6 Write; 7 restricted, 7 conditional	kms:CreateGrant, kms:Decrypt, kms:DescribeKey, kms:Encrypt, kms:GenerateDataKey, kms:GenerateDataKeyWithoutPlaintext, kms:ListAliases, kms:ListGrants, kms:ReEncryptFrom, kms:ReEncryptTo
Lake Formation	20 of 68	4 List, 5 Permissions management, 3 Read, 8 Write; 0 restricted, 0 conditional	lakeformation:*DataCellsFilter, lakeformation:BatchGrantPermissions, lakeformation:BatchRevokePermissions, lakeformation:CreateLakeFormationOptIn, lakeformation:DeleteLakeFormationOptIn, lakeformation:DeregisterResource, lakeformation:DescribeResource, lakeformation:GetDataAccess, lakeformation:GetDataLakeSettings, lakeformation:GrantPermissions, lakeformation:ListLakeFormationOptIns, lakeformation:ListPermissions and 4 more
CloudWatch Logs	All 133 actions (see the CloudWatch Logs page)	33 List, 2 Permissions management, 26 Read, 4 Tagging, 68 Write; 0 restricted, 0 conditional	logs:*
Organizations	1 of 63	1 Read; 0 restricted, 0 conditional	organizations:DescribeOrganization
Q	All 54 actions (see the Q page)	8 List, 14 Read, 2 Tagging, 30 Write; 0 restricted, 0 conditional	q:*
QuickSight	All 357 actions (see the QuickSight page)	68 List, 19 Permissions management, 91 Read, 2 Tagging, 177 Write; 0 restricted, 0 conditional	quicksight:*
Resource Access Manager	21 of 39	9 List, 7 Read, 5 Write; 5 restricted, 5 conditional	ram:AssociateResourceShare, ram:AssociateResourceSharePermission, ram:CreateResourceShare, ram:DeleteResourceShare, ram:DisassociateResourceShare, ram:Get, ram:List
RDS	All 173 actions (see the RDS page)	47 List, 1 Permissions management, 5 Read, 2 Tagging, 118 Write; 0 restricted, 0 conditional	rds:*
Redshift	All 167 actions (see the Redshift page)	18 List, 13 Permissions management, 40 Read, 2 Tagging, 94 Write; 0 restricted, 0 conditional	redshift:*
Redshift Data API	All 12 actions (see the Redshift Data API page)	3 List, 6 Read, 3 Write; 0 restricted, 0 conditional	redshift-data:*
Redshift Serverless	All 69 actions (see the Redshift Serverless page)	15 List, 17 Read, 2 Tagging, 35 Write; 0 restricted, 0 conditional	redshift-serverless:*
Rekognition	All 76 actions (see the Rekognition page)	1 List, 36 Read, 2 Tagging, 37 Write; 0 restricted, 0 conditional	rekognition:*
Resource Groups	2 of 29	1 List, 1 Read; 0 restricted, 0 conditional	resource-groups:GetGroupQuery, resource-groups:ListGroupResources
S3	All 155 actions (see the S3 page)	15 List, 24 Permissions management, 58 Read, 8 Tagging, 50 Write; 0 restricted, 0 conditional	s3:*
S3 Tables	All 61 actions (see the S3 Tables page)	5 List, 4 Permissions management, 22 Read, 2 Tagging, 28 Write; 0 restricted, 0 conditional	s3tables:*
SageMaker	All 441 actions (see the SageMaker page)	96 List, 97 Read, 2 Tagging, 246 Write; 0 restricted, 0 conditional	sagemaker:*
SageMakerDataScienceAssistant	All 1 actions (see the SageMakerDataScienceAssistant page)	1 Write; 0 restricted, 0 conditional	sagemaker-data-science-assistant:*
SageMaker MLflow	All 61 actions (see the SageMaker MLflow page)	3 List, 17 Read, 41 Write; 0 restricted, 0 conditional	sagemaker-mlflow:*
SageMaker Unified Studio MCP	All 1 actions (see the SageMaker Unified Studio MCP page)	1 Read; 0 restricted, 0 conditional	sagemaker-unified-studio-mcp:*
EventBridge Scheduler	All 13 actions (see the EventBridge Scheduler page)	3 List, 3 Read, 2 Tagging, 5 Write; 0 restricted, 0 conditional	scheduler:*
Secrets Manager	10 of 27	1 List, 1 Permissions management, 2 Read, 1 Tagging, 5 Write; 9 restricted, 3 conditional	secretsmanager:CreateSecret, secretsmanager:DeleteSecret, secretsmanager:DescribeSecret, secretsmanager:GetSecretValue, secretsmanager:ListSecrets, secretsmanager:PutResourcePolicy, secretsmanager:PutSecretValue, secretsmanager:RotateSecret, secretsmanager:TagResource, secretsmanager:UpdateSecret
SQL Workbench	All 79 actions (see the SQL Workbench page)	9 List, 23 Read, 2 Tagging, 45 Write; 0 restricted, 0 conditional	sqlworkbench:*
Systems Manager	6 of 164	4 Read, 2 Write; 6 restricted, 0 conditional	ssm:DeleteParameter, ssm:GetParameter*, ssm:PutParameter
IAM Identity Center	12 of 126	1 List, 2 Read, 9 Write; 11 restricted, 11 conditional	sso:CreateApplication, sso:CreateApplicationAssignment, sso:DeleteApplication, sso:DeleteApplicationAssignment, sso:DescribeApplication, sso:DescribeInstance, sso:ListInstances, sso:PutApplicationAccessScope, sso:PutApplicationAssignmentConfiguration, sso:PutApplicationAuthenticationMethod, sso:PutApplicationGrant, sso:UpdateApplication
STS	4 of 16	1 Read, 1 Tagging, 2 Write; 2 restricted, 2 conditional	sts:AssumeRole, sts:GetServiceBearerToken, sts:SetSourceIdentity, sts:TagSession
Resource Group Tagging	1 of 9	1 Read; 0 restricted, 0 conditional	tag:GetResources
Textract	All 25 actions (see the Textract page)	14 Read, 2 Tagging, 9 Write; 0 restricted, 0 conditional	textract:*
X-Ray	All 32 actions (see the X-Ray page)	2 List, 1 Permissions management, 13 Read, 2 Tagging, 14 Write; 0 restricted, 0 conditional	xray:*

DynamoDB: 26 actions

dynamodb:DescribeBackup (Read)
dynamodb:DescribeBulkOperation (Read)
dynamodb:DescribeContinuousBackups (Read)
dynamodb:DescribeContributorInsights (Read)
dynamodb:DescribeEndpoints (Read)
dynamodb:DescribeExport (Read)
dynamodb:DescribeGlobalTable (Read)
dynamodb:DescribeGlobalTableSettings (Read)
dynamodb:DescribeImport (Read)
dynamodb:DescribeKinesisStreamingDestination (Read)
dynamodb:DescribeLimits (Read)
dynamodb:DescribeReservedCapacity (Read)
dynamodb:DescribeReservedCapacityOfferings (Read)
dynamodb:DescribeStream (Read)
dynamodb:DescribeTable (Read)
dynamodb:DescribeTableReplicaAutoScaling (Read)
dynamodb:DescribeTimeToLive (Read)
dynamodb:ListBackups (List)
dynamodb:ListBulkOperations (List)
dynamodb:ListContributorInsights (List)
dynamodb:ListExports (List)
dynamodb:ListGlobalTables (List)
dynamodb:ListImports (List)
dynamodb:ListStreams (Read)
dynamodb:ListTables (List)
dynamodb:ListTagsOfResource (Read)

EC2: 208 actions

ec2:AuthorizeSecurityGroupEgress (Write)
ec2:AuthorizeSecurityGroupIngress (Write)
ec2:CreateNetworkInterface (Write)
ec2:CreateNetworkInterfacePermission (Permissions management)
ec2:CreateSecurityGroup (Write)
ec2:CreateTags (Tagging)
ec2:CreateVpcEndpoint (Write)
ec2:DeleteNetworkInterface (Write)
ec2:DeleteNetworkInterfacePermission (Permissions management)
ec2:DeleteSecurityGroup (Write)
ec2:DeleteTags (Tagging)
ec2:DescribeAccountAttributes (List)
ec2:DescribeAccountVpcEncryptionControl (List)
ec2:DescribeAddressTransfers (List)
ec2:DescribeAddresses (List)
ec2:DescribeAddressesAttribute (List)
ec2:DescribeAggregateIdFormat (List)
ec2:DescribeApplicationStatus (List)
ec2:DescribeApplicationStatusCheckAssociations (List)
ec2:DescribeApplicationStatusChecks (List)
ec2:DescribeAvailabilityZones (List)
ec2:DescribeAwsNetworkPerformanceMetricSubscriptions (List)
ec2:DescribeBundleTasks (List)
ec2:DescribeByoipCidrs (List)
ec2:DescribeCapacityBlockExtensionHistory (List)
ec2:DescribeCapacityBlockExtensionOfferings (List)
ec2:DescribeCapacityBlockOfferings (List)
ec2:DescribeCapacityBlockStatus (List)
ec2:DescribeCapacityBlocks (List)
ec2:DescribeCapacityManagerDataExports (List)
ec2:DescribeCapacityReservationBillingRequests (List)
ec2:DescribeCapacityReservationCancellationQuotes (List)
ec2:DescribeCapacityReservationDateChangeQuotes (List)
ec2:DescribeCapacityReservationFleets (List)
ec2:DescribeCapacityReservationTopology (List)
ec2:DescribeCapacityReservations (List)
ec2:DescribeCarrierGateways (List)
ec2:DescribeClassicLinkInstances (List)
ec2:DescribeClientVpnAuthorizationRules (List)
ec2:DescribeClientVpnConnections (List)
ec2:DescribeClientVpnEndpoints (List)
ec2:DescribeClientVpnRoutes (List)
ec2:DescribeClientVpnTargetNetworks (List)
ec2:DescribeCoipPools (List)
ec2:DescribeConversionTasks (List)
ec2:DescribeCustomerGateways (List)
ec2:DescribeDeclarativePoliciesReports (List)
ec2:DescribeDhcpOptions (List)
ec2:DescribeEgressOnlyInternetGateways (List)
ec2:DescribeElasticGpus (List)
ec2:DescribeExportImageTasks (List)
ec2:DescribeExportTasks (List)
ec2:DescribeFastLaunchImages (List)
ec2:DescribeFastSnapshotRestores (List)
ec2:DescribeFleetHistory (List)
ec2:DescribeFleetInstances (List)
ec2:DescribeFleets (List)
ec2:DescribeFlowLogs (List)
ec2:DescribeFpgaImageAttribute (List)
ec2:DescribeFpgaImages (List)
ec2:DescribeHostReservationOfferings (List)
ec2:DescribeHostReservations (List)
ec2:DescribeHosts (List)
ec2:DescribeIamInstanceProfileAssociations (List)
ec2:DescribeIdFormat (List)
ec2:DescribeIdentityIdFormat (List)
ec2:DescribeImageAttribute (List)
ec2:DescribeImageReferences (List)
ec2:DescribeImageUsageReportEntries (List)
ec2:DescribeImageUsageReports (List)
ec2:DescribeImages (List)
ec2:DescribeImportImageTasks (List)
ec2:DescribeImportSnapshotTasks (List)
ec2:DescribeInstanceAttribute (List)
ec2:DescribeInstanceConnectEndpoints (List)
ec2:DescribeInstanceCreditSpecifications (List)
ec2:DescribeInstanceEventNotificationAttributes (List)
ec2:DescribeInstanceEventWindows (List)
ec2:DescribeInstanceImageMetadata (List)
ec2:DescribeInstanceSqlHaHistoryStates (List)
ec2:DescribeInstanceSqlHaStates (List)
ec2:DescribeInstanceStatus (List)
ec2:DescribeInstanceTopology (List)
ec2:DescribeInstanceTypeOfferings (List)
ec2:DescribeInstanceTypes (List)
ec2:DescribeInstances (List)
ec2:DescribeInternetGateways (List)
ec2:DescribeIpamByoasn (List)
ec2:DescribeIpamExternalResourceVerificationTokens (List)
ec2:DescribeIpamInternetRegistryAssociations (List)
ec2:DescribeIpamPolicies (List)
ec2:DescribeIpamPoolAllocations (List)
ec2:DescribeIpamPools (List)
ec2:DescribeIpamPrefixListResolverTargets (List)
ec2:DescribeIpamPrefixListResolvers (List)
ec2:DescribeIpamResourceDiscoveries (List)
ec2:DescribeIpamResourceDiscoveryAssociations (List)
ec2:DescribeIpamScopes (List)
ec2:DescribeIpams (List)
ec2:DescribeIpv6Pools (List)
ec2:DescribeKeyPairs (List)
ec2:DescribeLaunchTemplateVersions (List)
ec2:DescribeLaunchTemplates (List)
ec2:DescribeLocalGatewayRouteTablePermissions (List)
ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations (List)
ec2:DescribeLocalGatewayRouteTableVpcAssociations (List)
ec2:DescribeLocalGatewayRouteTables (List)
ec2:DescribeLocalGatewayVirtualInterfaceGroups (List)
ec2:DescribeLocalGatewayVirtualInterfaces (List)
ec2:DescribeLocalGateways (List)
ec2:DescribeLockedSnapshots (List)
ec2:DescribeMacHosts (List)
ec2:DescribeMacModificationTasks (List)
ec2:DescribeManagedPrefixLists (List)
ec2:DescribeMovingAddresses (List)
ec2:DescribeNatGateways (List)
ec2:DescribeNetworkAcls (List)
ec2:DescribeNetworkInsightsAccessScopeAnalyses (List)
ec2:DescribeNetworkInsightsAccessScopes (List)
ec2:DescribeNetworkInsightsAnalyses (List)
ec2:DescribeNetworkInsightsPaths (List)
ec2:DescribeNetworkInterfaceAttribute (List)
ec2:DescribeNetworkInterfacePermissions (List)
ec2:DescribeNetworkInterfaces (List)
ec2:DescribeOutpostLags (List)
ec2:DescribePlacementGroups (List)
ec2:DescribePrefixLists (List)
ec2:DescribePrincipalIdFormat (List)
ec2:DescribePublicIpv4Pools (List)
ec2:DescribeRegions (List)
ec2:DescribeReplaceRootVolumeTasks (List)
ec2:DescribeReservedInstances (List)
ec2:DescribeReservedInstancesListings (List)
ec2:DescribeReservedInstancesModifications (List)
ec2:DescribeReservedInstancesOfferings (List)
ec2:DescribeRouteServerEndpoints (List)
ec2:DescribeRouteServerPeers (List)
ec2:DescribeRouteServers (List)
ec2:DescribeRouteTables (List)
ec2:DescribeScheduledInstanceAvailability (List)
ec2:DescribeScheduledInstances (List)
ec2:DescribeSecondaryInterfaces (List)
ec2:DescribeSecondaryNetworks (List)
ec2:DescribeSecondarySubnets (List)
ec2:DescribeSecurityGroupReferences (List)
ec2:DescribeSecurityGroupRules (List)
ec2:DescribeSecurityGroupVpcAssociations (List)
ec2:DescribeSecurityGroups (List)
ec2:DescribeServiceLinkVirtualInterfaces (List)
ec2:DescribeSnapshotAttribute (List)
ec2:DescribeSnapshotTierStatus (List)
ec2:DescribeSnapshots (List)
ec2:DescribeSpotDatafeedSubscription (List)
ec2:DescribeSpotFleetInstances (List)
ec2:DescribeSpotFleetRequestHistory (List)
ec2:DescribeSpotFleetRequests (List)
ec2:DescribeSpotInstanceRequests (List)
ec2:DescribeSpotPriceHistory (List)
ec2:DescribeStaleSecurityGroups (List)
ec2:DescribeStoreImageTasks (List)
ec2:DescribeSubnets (List)
ec2:DescribeTags (List)
ec2:DescribeTrafficMirrorFilterRules (List)
ec2:DescribeTrafficMirrorFilters (List)
ec2:DescribeTrafficMirrorSessions (List)
ec2:DescribeTrafficMirrorTargets (List)
ec2:DescribeTransitGatewayAttachments (List)
ec2:DescribeTransitGatewayConnectPeers (List)
ec2:DescribeTransitGatewayConnects (List)
ec2:DescribeTransitGatewayMeteringPolicies (List)
ec2:DescribeTransitGatewayMulticastDomains (List)
ec2:DescribeTransitGatewayPeeringAttachments (List)
ec2:DescribeTransitGatewayPolicyTables (List)
ec2:DescribeTransitGatewayRouteTableAnnouncements (List)
ec2:DescribeTransitGatewayRouteTables (List)
ec2:DescribeTransitGatewayVpcAttachments (List)
ec2:DescribeTransitGateways (List)
ec2:DescribeTrunkInterfaceAssociations (List)
ec2:DescribeVerifiedAccessEndpoints (List)
ec2:DescribeVerifiedAccessGroups (List)
ec2:DescribeVerifiedAccessInstanceLoggingConfigurations (List)
ec2:DescribeVerifiedAccessInstanceWebAclAssociations (List)
ec2:DescribeVerifiedAccessInstances (List)
ec2:DescribeVerifiedAccessTrustProviders (List)
ec2:DescribeVolumeAttribute (List)
ec2:DescribeVolumeStatus (List)
ec2:DescribeVolumes (List)
ec2:DescribeVolumesModifications (List)
ec2:DescribeVpcAttribute (List)
ec2:DescribeVpcBlockPublicAccessExclusions (List)
ec2:DescribeVpcBlockPublicAccessOptions (List)
ec2:DescribeVpcClassicLink (List)
ec2:DescribeVpcClassicLinkDnsSupport (List)
ec2:DescribeVpcEncryptionControls (List)
ec2:DescribeVpcEndpointAssociations (List)
ec2:DescribeVpcEndpointConnectionNotifications (List)
ec2:DescribeVpcEndpointConnections (List)
ec2:DescribeVpcEndpointServiceConfigurations (List)
ec2:DescribeVpcEndpointServicePermissions (List)
ec2:DescribeVpcEndpointServices (List)
ec2:DescribeVpcEndpoints (List)
ec2:DescribeVpcPeeringConnections (List)
ec2:DescribeVpcs (List)
ec2:DescribeVpnConcentrators (List)
ec2:DescribeVpnConnections (List)
ec2:DescribeVpnGateways (List)
ec2:RevokeSecurityGroupEgress (Write)
ec2:RevokeSecurityGroupIngress (Write)

Elastic Container Registry: 5 actions

ecr:BatchCheckLayerAvailability (Read)
ecr:BatchGetImage (Read)
ecr:DescribeImages (List)
ecr:GetAuthorizationToken (Read)
ecr:GetDownloadUrlForLayer (Read)

Elastic Container Registry Public: 1 actions

ecr-public:GetAuthorizationToken (Read)

IAM: 10 actions

iam:AttachRolePolicy (Permissions management)
iam:CreateRole (Write)
iam:CreateServiceLinkedRole (Write)
iam:GetRole (Read)
iam:GetUser (Read)
iam:ListRoles (List)
iam:ListUsers (List)
iam:PassRole (Write)
iam:TagRole (Tagging)
iam:UpdateAssumeRolePolicy (Permissions management)

Identity Store: 2 actions

identitystore:DescribeGroup (Read)
identitystore:DescribeUser (Read)

KMS: 10 actions

kms:CreateGrant (Permissions management)
kms:Decrypt (Write)
kms:DescribeKey (Read)
kms:Encrypt (Write)
kms:GenerateDataKey (Write)
kms:GenerateDataKeyWithoutPlaintext (Write)
kms:ListAliases (List)
kms:ListGrants (List)
kms:ReEncryptFrom (Write)
kms:ReEncryptTo (Write)

Lake Formation: 20 actions

lakeformation:BatchGrantPermissions (Permissions management)
lakeformation:BatchRevokePermissions (Permissions management)
lakeformation:CreateDataCellsFilter (Write)
lakeformation:CreateLakeFormationOptIn (Write)
lakeformation:DeleteDataCellsFilter (Write)
lakeformation:DeleteLakeFormationOptIn (Write)
lakeformation:DeregisterResource (Write)
lakeformation:DescribeResource (Read)
lakeformation:GetDataAccess (Write)
lakeformation:GetDataCellsFilter (Read)
lakeformation:GetDataLakeSettings (Read)
lakeformation:GrantPermissions (Permissions management)
lakeformation:ListDataCellsFilter (List)
lakeformation:ListLakeFormationOptIns (List)
lakeformation:ListPermissions (List)
lakeformation:ListResources (List)
lakeformation:PutDataLakeSettings (Permissions management)
lakeformation:RegisterResource (Write)
lakeformation:RevokePermissions (Permissions management)
lakeformation:UpdateDataCellsFilter (Write)

Organizations: 1 actions

organizations:DescribeOrganization (Read)

Resource Access Manager: 21 actions

ram:AssociateResourceShare (Write)
ram:AssociateResourceSharePermission (Write)
ram:CreateResourceShare (Write)
ram:DeleteResourceShare (Write)
ram:DisassociateResourceShare (Write)
ram:GetCustomerManagedPermissionPolicy (Read)
ram:GetPermission (Read)
ram:GetResourcePolicies (Read)
ram:GetResourceShareAssociations (Read)
ram:GetResourceShareInvitations (Read)
ram:GetResourceShares (Read)
ram:ListPendingInvitationResources (Read)
ram:ListPermissionAssociations (List)
ram:ListPermissionVersions (List)
ram:ListPermissions (List)
ram:ListPrincipals (List)
ram:ListReplacePermissionAssociationsWork (List)
ram:ListResourceSharePermissions (List)
ram:ListResourceTypes (List)
ram:ListResources (List)
ram:ListSourceAssociations (List)

Resource Groups: 2 actions

resource-groups:GetGroupQuery (Read)
resource-groups:ListGroupResources (List)

Secrets Manager: 10 actions

secretsmanager:CreateSecret (Write)
secretsmanager:DeleteSecret (Write)
secretsmanager:DescribeSecret (Read)
secretsmanager:GetSecretValue (Read)
secretsmanager:ListSecrets (List)
secretsmanager:PutResourcePolicy (Permissions management)
secretsmanager:PutSecretValue (Write)
secretsmanager:RotateSecret (Write)
secretsmanager:TagResource (Tagging)
secretsmanager:UpdateSecret (Write)

Systems Manager: 6 actions

ssm:DeleteParameter (Write)
ssm:GetParameter (Read)
ssm:GetParameterHistory (Read)
ssm:GetParameters (Read)
ssm:GetParametersByPath (Read)
ssm:PutParameter (Write)

IAM Identity Center: 12 actions

sso:CreateApplication (Write)
sso:CreateApplicationAssignment (Write)
sso:DeleteApplication (Write)
sso:DeleteApplicationAssignment (Write)
sso:DescribeApplication (Read)
sso:DescribeInstance (Read)
sso:ListInstances (List)
sso:PutApplicationAccessScope (Write)
sso:PutApplicationAssignmentConfiguration (Write)
sso:PutApplicationAuthenticationMethod (Write)
sso:PutApplicationGrant (Write)
sso:UpdateApplication (Write)

STS: 4 actions

sts:AssumeRole (Write)
sts:GetServiceBearerToken (Read)
sts:SetSourceIdentity (Write)
sts:TagSession (Tagging)

Resource Group Tagging: 1 actions

tag:GetResources (Read)

Data-plane actions (169)

By access level: 23 List, 3 Permissions management, 65 Read, 4 Tagging, 74 Write.

Data-plane actions by service
Service	Granted	Access levels and limits	Granted by
MWAA	All 1 actions (see the MWAA page)	1 Write; 0 restricted, 0 conditional	airflow:*
Bedrock	All 37 actions (see the Bedrock page)	3 List, 22 Read, 12 Write; 0 restricted, 0 conditional	bedrock:*
Bedrock-Agentcore	All 62 actions (see the Bedrock-Agentcore page)	13 List, 13 Read, 36 Write; 0 restricted, 0 conditional	bedrock-agentcore:*
CloudWatch	All 5 actions (see the CloudWatch page)	1 List, 3 Read, 1 Write; 0 restricted, 0 conditional	cloudwatch:*
DynamoDB	3 of 17	3 Read; 0 restricted, 0 conditional	dynamodb:PartiQLSelect, dynamodb:Query, dynamodb:Scan
EventBridge	All 3 actions (see the EventBridge page)	3 Write; 0 restricted, 0 conditional	events:*
QuickSight	All 2 actions (see the QuickSight page)	1 Read, 1 Write; 0 restricted, 0 conditional	quicksight:*
S3	All 25 actions (see the S3 page)	3 List, 3 Permissions management, 8 Read, 4 Tagging, 7 Write; 0 restricted, 0 conditional	s3:*
SageMaker	All 19 actions (see the SageMaker page)	1 List, 7 Read, 11 Write; 0 restricted, 0 conditional	sagemaker:*
X-Ray	All 12 actions (see the X-Ray page)	2 List, 8 Read, 2 Write; 0 restricted, 0 conditional	xray:*

DynamoDB: 3 actions

dynamodb:PartiQLSelect (Read)
dynamodb:Query (Read)
dynamodb:Scan (Read)

Excluded and conditional actions

athena:GetResourceDashboard (deny-conditional, statement 4): 1 matching actions
athena:GetSession (deny-conditional, statement 4): 1 matching actions
athena:GetSessionEndpoint (deny-conditional, statement 4): 1 matching actions
athena:GetSessionStatus (deny-conditional, statement 4): 1 matching actions
athena:StartSession (deny-conditional, statement 4): 1 matching actions
athena:TerminateSession (deny-conditional, statement 4): 1 matching actions
elasticmapreduce:*Session* (deny-conditional, statement 4): 11 matching actions
emr-containers:*ManagedEndpoint* (deny-conditional, statement 4): 5 matching actions
emr-serverless:*Dashboard* (deny-conditional, statement 4): 2 matching actions
emr-serverless:*Session* (deny-conditional, statement 4): 5 matching actions
glue:CancelStatement (deny-conditional, statement 4): 1 matching actions
glue:CreateSession (deny-conditional, statement 4): 1 matching actions
glue:DeleteSession (deny-conditional, statement 4): 1 matching actions
glue:GetDashboardUrl (deny-conditional, statement 4): 1 matching actions
glue:GetSession (deny-conditional, statement 4): 1 matching actions
glue:GetSessionEndpoint (deny-conditional, statement 4): 1 matching actions
glue:GetStatement (deny-conditional, statement 4): 1 matching actions
glue:RunStatement (deny-conditional, statement 4): 1 matching actions
glue:StopSession (deny-conditional, statement 4): 1 matching actions
athena:TagResource (deny-conditional, statement 5): 1 matching actions
athena:UntagResource (deny-conditional, statement 5): 1 matching actions
elasticmapreduce:AddTags (deny-conditional, statement 5): 1 matching actions
elasticmapreduce:RemoveTags (deny-conditional, statement 5): 1 matching actions
emr-containers:*Resource (deny-conditional, statement 5): 3 matching actions
emr-serverless:*Resource (deny-conditional, statement 5): 3 matching actions
glue:TagResource (deny-conditional, statement 5): 1 matching actions
glue:UntagResource (deny-conditional, statement 5): 1 matching actions

Resource scope and attachment

Resource scope across granted actions: mixed.

Can be attached: Yes, to users, groups and roles.

Why this tier

Grants at least 80% of the write and permissions-management actions of: airflow (8 of 8), airflow-serverless (5 of 5), application-autoscaling (6 of 6), athena (36 of 36), bedrock (136 of 136), bedrock-agentcore (148 of 148), cloudwatch (89 of 89), codeconnections (13 of 13), and 24 more.
Grants data-plane write actions on a data store on all resources without conditions.
Grants iam:PassRole, but only for scoped roles or under conditions (for example iam:PassedToService).
Grants permissions-management actions on iam, but only for scoped resources or under conditions.
31 granted write or permissions-management actions have no data-plane classification from AWS, so the data-plane rule cannot assess them.

Guidance

Practical scope

The DataAccess and ComputeAccess statements allow service-wide wildcards on Resource "*", including s3:*, glue:*, logs:*, redshift:*, redshift-data:*, rds:*, athena:*, bedrock:*, sagemaker:*, datazone:*, elasticmapreduce:* and airflow:*. iam:GetRole, iam:ListRoles, iam:GetUser, iam:ListUsers, sts:AssumeRole and sts:GetServiceBearerToken are allowed on all resources. iam:CreateRole and iam:AttachRolePolicy are limited to roles under service-role/AmazonSageMaker*, and attached policies are limited to listed policy ARNs. iam:UpdateAssumeRolePolicy is limited to AmazonSageMaker Admin and User IAM execution role names. iam:PassRole on all resources requires the target service to be one of a listed set (including sagemaker.amazonaws.com, lakeformation.amazonaws.com, athena.amazonaws.com, glue.amazonaws.com, datazone.amazonaws.com and airflow-serverless.amazonaws.com) and the resource to be in the same account. A second iam:PassRole statement covers roles under service-role/AmazonSageMaker* and a role path taken from a principal tag, for a listed set of services. Lake Formation, Secrets Manager, KMS, DynamoDB, ECR and SSM actions also appear. Deny statements apply to athena, emr-serverless, emr-containers, elasticmapreduce and glue session resources when the AmazonDataZoneSessionOwner tag does not match the source identity.

Use cases

Provision, manage and access resources for SageMaker Unified Studio when using IAM roles.

Best practices

AWS managed policies don't grant least privilege permissions. The IAM User Guide suggests using IAM Access Analyzer to see which permissions principals actually use, then writing a custom policy or generating one with only the required permissions.

Security considerations

The guide says it grants broad access to data resources and full access to all APIs and resources for services used in SageMaker Unified Studio, such as S3, AWS Glue, Amazon Redshift, Athena, Amazon Bedrock and CloudWatch Logs.
The IAM actions allow creating roles under service-role/AmazonSageMaker*, attaching listed policies to them, and updating the trust policy of the SageMaker Unified Studio execution roles. iam:PassRole is limited to listed services. The IAM User Guide says a user must have permission to pass a role to an AWS service before the service can be configured with that role.
The Deny statements apply only to session resources, under a condition on the AmazonDataZoneSessionOwner tag.
You cannot change the permissions in an AWS managed policy. If AWS updates the policy, the update affects every user, group and role it is attached to.

Assignment guidance

You can attach this policy to your users, groups and roles. The reference page also links to guidance on creating a permission set using AWS managed policies in IAM Identity Center. The SageMaker Unified Studio Administrator Guide describes it as an administrative execution policy for using IAM roles with SageMaker Unified Studio. Where a narrower scope is needed, AWS recommends customer managed policies specific to your use cases.

Same service

Same domain

Frequently asked questions

When should I attach SageMakerStudioAdminIAMPermissiveExecutionPolicy?: The SageMaker Unified Studio Administrator Guide describes it as an administrative execution policy for using IAM roles with SageMaker Unified Studio. Attach it only where administrators need to provision, manage and access resources through that service.
What does SageMakerStudioAdminIAMPermissiveExecutionPolicy grant?: It allows service-wide actions on all resources for the data and compute services Unified Studio uses (including S3, Glue, Redshift, Athena, Bedrock, SageMaker, DataZone and EMR), plus scoped IAM actions to create execution roles and update their trust policy, conditioned iam:PassRole, and Lake Formation, Secrets Manager, KMS, DynamoDB, ECR and SSM actions.
What are the security risks of SageMakerStudioAdminIAMPermissiveExecutionPolicy?: AWS says the policy gives broad access to data resources and full access to all APIs of the services it covers. It also allows role creation, policy attachment and trust policy updates within the AmazonSageMaker role patterns. AWS managed policies do not grant least privilege permissions, and an AWS update to the policy affects every identity it is attached to.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "DataAccess",
      "Effect": "Allow",
      "Action": [
        "cloudwatch:*",
        "glue:*",
        "logs:*",
        "redshift-data:*",
        "redshift-serverless:*",
        "redshift:*",
        "s3:*",
        "s3tables:*",
        "comprehend:*",
        "textract:*",
        "rekognition:*",
        "sagemaker-data-science-assistant:*",
        "rds:*",
        "quicksight:*",
        "events:*",
        "xray:*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "ComputeAccess",
      "Effect": "Allow",
      "Action": [
        "athena:*",
        "bedrock:*",
        "bedrock-agentcore:*",
        "codewhisperer:*",
        "sagemaker-unified-studio-mcp:*",
        "datazone:*",
        "elasticmapreduce:*",
        "emr-containers:*",
        "q:*",
        "sagemaker:*",
        "sagemaker-mlflow:*",
        "scheduler:*",
        "sqlworkbench:*",
        "emr-serverless:*",
        "airflow-serverless:*",
        "airflow:*",
        "application-autoscaling:*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "CfnManage",
      "Effect": "Allow",
      "Action": [
        "cloudformation:*"
      ],
      "Resource": [
        "arn:aws:cloudformation:*:*:stack/DataZone*",
        "arn:aws:cloudformation:*:*:transform/*"
      ]
    },
    {
      "Sid": "ValidateCfn",
      "Effect": "Allow",
      "Action": "cloudformation:ValidateTemplate",
      "Resource": "*"
    },
    {
      "Sid": "DenyForeignSessionAccess",
      "Effect": "Deny",
      "Action": [
        "athena:GetResourceDashboard",
        "athena:GetSession",
        "athena:GetSessionEndpoint",
        "athena:GetSessionStatus",
        "athena:StartSession",
        "athena:TerminateSession",
        "emr-serverless:*Session*",
        "emr-serverless:*Dashboard*",
        "emr-containers:*ManagedEndpoint*",
        "elasticmapreduce:*Session*",
        "glue:CancelStatement",
        "glue:CreateSession",
        "glue:DeleteSession",
        "glue:GetDashboardUrl",
        "glue:GetSession",
        "glue:GetSessionEndpoint",
        "glue:GetStatement",
        "glue:RunStatement",
        "glue:StopSession"
      ],
      "Resource": [
        "arn:aws:athena:*:*:workgroup/*/session/*",
        "arn:aws:emr-serverless:*:*:/applications/*/sessions/*",
        "arn:aws:emr-containers:*:*:/virtualclusters/*/endpoints/*",
        "arn:aws:elasticmapreduce:*:*:cluster/*/session/*",
        "arn:aws:glue:*:*:session/*"
      ],
      "Condition": {
        "StringNotEquals": {
          "aws:RequestTag/AmazonDataZoneSessionOwner": "${aws:SourceIdentity}",
          "aws:ResourceTag/AmazonDataZoneSessionOwner": "${aws:SourceIdentity}"
        }
      }
    },
    {
      "Sid": "DenyTaggingUntaggingForeignSessions",
      "Effect": "Deny",
      "Action": [
        "athena:TagResource",
        "athena:UntagResource",
        "emr-serverless:*Resource",
        "emr-containers:*Resource",
        "elasticmapreduce:AddTags",
        "elasticmapreduce:RemoveTags",
        "glue:TagResource",
        "glue:UntagResource"
      ],
      "Resource": [
        "arn:aws:athena:*:*:workgroup/*/session/*",
        "arn:aws:emr-serverless:*:*:/applications/*/sessions/*",
        "arn:aws:emr-containers:*:*:/virtualclusters/*/endpoints/*",
        "arn:aws:elasticmapreduce:*:*:cluster/*/session/*",
        "arn:aws:glue:*:*:session/*"
      ],
      "Condition": {
        "StringNotEquals": {
          "aws:ResourceTag/AmazonDataZoneSessionOwner": "${aws:SourceIdentity}"
        }
      }
    },
    {
      "Sid": "IamSts",
      "Effect": "Allow",
      "Action": [
        "iam:GetRole",
        "iam:ListRoles",
        "iam:GetUser",
        "iam:ListUsers",
        "sts:AssumeRole",
        "ecr-public:GetAuthorizationToken",
        "sts:GetServiceBearerToken"
      ],
      "Resource": "*"
    },
    {
      "Sid": "CreateSLR",
      "Effect": "Allow",
      "Action": "iam:CreateServiceLinkedRole",
      "Resource": [
        "arn:aws:iam::*:role/aws-service-role/neptune-graph.amazonaws.com/AWSServiceRoleForNeptuneGraph",
        "arn:aws:iam::*:role/aws-service-role/redshift.amazonaws.com/AWSServiceRoleForRedshift",
        "arn:aws:iam::*:role/aws-service-role/sagemaker.amazonaws.com/AWSServiceRoleForAmazonSageMakerNotebooks",
        "arn:aws:iam::*:role/aws-service-role/ops.emr-serverless.amazonaws.com/AWSServiceRoleForAmazonEMRServerless",
        "arn:aws:iam::*:role/aws-service-role/airflow.amazonaws.com/AWSServiceRoleForAmazonMWAA",
        "arn:aws:iam::*:role/aws-service-role/airflow-serverless.amazonaws.com/AWSServiceRoleForAmazonMWAAServerless",
        "arn:aws:iam::*:role/aws-service-role/elasticmapreduce.amazonaws.com/AWSServiceRoleForEMRCleanup",
        "arn:aws:iam::*:role/aws-service-role/sagemaker.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_SageMakerEndpoint",
        "arn:aws:iam::*:role/aws-service-role/observability.aoss.amazonaws.com/AWSServiceRoleForAmazonOpenSearchServerless",
        "arn:aws:iam::*:role/aws-service-role/ops.athena.amazonaws.com/AWSServiceRoleForAmazonAthena",
        "arn:aws:iam::*:role/aws-service-role/runtime-identity.bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreRuntimeIdentity",
        "arn:aws:iam::*:role/aws-service-role/network.bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreNetwork",
        "arn:aws:iam::*:role/aws-service-role/bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreGatewayNetwork",
        "arn:aws:iam::*:role/aws-service-role/identity-network.bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreIdentity"
      ]
    },
    {
      "Sid": "TagRoleAndSession",
      "Effect": "Allow",
      "Action": [
        "iam:TagRole",
        "sts:TagSession"
      ],
      "Resource": "*",
      "Condition": {
        "ForAllValues:StringLike": {
          "aws:TagKeys": [
            "AmazonDataZone*",
            "SageMakerSpacesDomainId"
          ]
        }
      }
    },
    {
      "Sid": "UpdateDzManagedRoleTrustPolicy",
      "Effect": "Allow",
      "Action": "iam:UpdateAssumeRolePolicy",
      "Resource": [
        "arn:aws:iam::*:role/service-role/AmazonSageMakerAdminIAMExecutionRole*",
        "arn:aws:iam::*:role/service-role/AmazonSageMakerUserIAMExecutionRole*",
        "arn:aws:iam::*:role/AmazonSageMakerAdminIAMExecutionRole*",
        "arn:aws:iam::*:role/AmazonSageMakerUserIAMExecutionRole*"
      ]
    },
    {
      "Sid": "PassRoleForProvisioning",
      "Effect": "Allow",
      "Action": "iam:PassRole",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "aws:ResourceAccount": "${aws:PrincipalAccount}",
          "iam:PassedToService": [
            "sagemaker.amazonaws.com",
            "lakeformation.amazonaws.com",
            "athena.amazonaws.com",
            "glue.amazonaws.com",
            "datazone.amazonaws.com",
            "airflow-serverless.amazonaws.com"
          ]
        }
      }
    },
    {
      "Sid": "PassRole",
      "Effect": "Allow",
      "Action": "iam:PassRole",
      "Resource": [
        "arn:aws:iam::*:role/service-role/AmazonSageMaker*",
        "arn:aws:iam::*:role/${aws:PrincipalTag/AmazonDataZonePassedRolePath}"
      ],
      "Condition": {
        "StringEquals": {
          "iam:PassedToService": [
            "bedrock.amazonaws.com",
            "bedrock-agentcore.amazonaws.com",
            "agent-registry.amazonaws.com",
            "datazone.amazonaws.com",
            "redshift-serverless.amazonaws.com",
            "redshift.amazonaws.com",
            "scheduler.amazonaws.com",
            "emr-serverless.amazonaws.com",
            "elasticmapreduce.amazonaws.com",
            "airflow-serverless.amazonaws.com",
            "pods.eks.amazonaws.com",
            "access-grants.s3.amazonaws.com"
          ]
        }
      }
    },
    {
      "Sid": "CreateRole",
      "Effect": "Allow",
      "Action": [
        "iam:CreateRole"
      ],
      "Resource": [
        "arn:aws:iam::*:role/service-role/AmazonSageMaker*"
      ]
    },
    {
      "Sid": "AttachPolicy",
      "Effect": "Allow",
      "Action": "iam:AttachRolePolicy",
      "Resource": "arn:aws:iam::*:role/service-role/AmazonSageMaker*",
      "Condition": {
        "ArnEquals": {
          "iam:PolicyARN": [
            "arn:aws:iam::aws:policy/SageMakerStudioUserIAMDefaultExecutionPolicy",
            "arn:aws:iam::aws:policy/SageMakerStudioUserIAMPermissiveExecutionPolicy",
            "arn:aws:iam::aws:policy/service-role/AmazonS3TablesLakeFormationServiceRole",
            "arn:aws:iam::aws:policy/service-role/SageMakerStudioDataAppsAccessRolePolicy"
          ]
        }
      }
    },
    {
      "Sid": "SourceIdentity",
      "Effect": "Allow",
      "Action": "sts:SetSourceIdentity",
      "Resource": "*",
      "Condition": {
        "StringLike": {
          "sts:SourceIdentity": "${aws:PrincipalTag/datazone:userId}"
        }
      }
    },
    {
      "Sid": "SSM",
      "Effect": "Allow",
      "Action": [
        "ssm:DeleteParameter",
        "ssm:GetParameter*",
        "ssm:PutParameter"
      ],
      "Resource": [
        "arn:aws:ssm:*:*:parameter/amazon/datazone/q*",
        "arn:aws:ssm:*:*:parameter/amazon/datazone/genAI/*",
        "arn:aws:ssm:*::parameter/aws/service/sagemaker-distribution/*"
      ]
    },
    {
      "Sid": "LFAccess",
      "Effect": "Allow",
      "Action": [
        "lakeformation:BatchGrantPermissions",
        "lakeformation:BatchRevokePermissions",
        "lakeformation:DeregisterResource",
        "lakeformation:DescribeResource",
        "lakeformation:GetDataAccess",
        "lakeformation:GetDataLakeSettings",
        "lakeformation:GrantPermissions",
        "lakeformation:ListPermissions",
        "lakeformation:ListResources",
        "lakeformation:PutDataLakeSettings",
        "lakeformation:RegisterResource",
        "lakeformation:RevokePermissions",
        "lakeformation:ListLakeFormationOptIns",
        "lakeformation:CreateLakeFormationOptIn",
        "lakeformation:DeleteLakeFormationOptIn",
        "lakeformation:*DataCellsFilter"
      ],
      "Resource": "*"
    },
    {
      "Sid": "FederatedConn",
      "Effect": "Allow",
      "Action": [
        "dynamodb:List*",
        "dynamodb:Describe*",
        "dynamodb:Scan",
        "dynamodb:PartiQLSelect",
        "dynamodb:Query",
        "secretsmanager:ListSecrets",
        "resource-groups:GetGroupQuery",
        "resource-groups:ListGroupResources"
      ],
      "Resource": "*"
    },
    {
      "Sid": "ManagePrivateSecret",
      "Effect": "Allow",
      "Action": [
        "secretsmanager:CreateSecret",
        "secretsmanager:DeleteSecret",
        "secretsmanager:DescribeSecret",
        "secretsmanager:GetSecretValue",
        "secretsmanager:TagResource",
        "secretsmanager:UpdateSecret",
        "secretsmanager:PutResourcePolicy",
        "secretsmanager:PutSecretValue"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "aws:ResourceTag/AmazonDataZoneProject": "false"
        }
      }
    },
    {
      "Sid": "ManageSharedSecret",
      "Effect": "Allow",
      "Action": [
        "secretsmanager:CreateSecret",
        "secretsmanager:DeleteSecret",
        "secretsmanager:DescribeSecret",
        "secretsmanager:GetSecretValue",
        "secretsmanager:TagResource",
        "secretsmanager:UpdateSecret",
        "secretsmanager:PutSecretValue"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "aws:ResourceTag/AmazonDataZoneProject": "true"
        },
        "StringEquals": {
          "aws:ResourceTag/for-use-with-all-datazone-projects": "true"
        }
      }
    },
    {
      "Sid": "RedshiftSecret",
      "Effect": "Allow",
      "Action": [
        "secretsmanager:CreateSecret",
        "secretsmanager:RotateSecret",
        "secretsmanager:DescribeSecret",
        "secretsmanager:UpdateSecret",
        "secretsmanager:DeleteSecret",
        "secretsmanager:TagResource"
      ],
      "Resource": "arn:aws:secretsmanager:*:*:secret:redshift!*"
    },
    {
      "Sid": "Ecr",
      "Effect": "Allow",
      "Action": [
        "ecr:BatchCheckLayerAvailability",
        "ecr:BatchGetImage",
        "ecr:DescribeImages",
        "ecr:GetAuthorizationToken",
        "ecr:GetDownloadUrlForLayer"
      ],
      "Resource": "*"
    },
    {
      "Sid": "CodeConnections",
      "Effect": "Allow",
      "Action": [
        "codeconnections:*",
        "codestar-connections:*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "KmsListAndDescribe",
      "Effect": "Allow",
      "Action": [
        "kms:DescribeKey",
        "kms:ListAliases",
        "kms:ListGrants"
      ],
      "Resource": "*"
    },
    {
      "Sid": "DataZoneKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:GenerateDataKey",
        "kms:Encrypt",
        "kms:GenerateDataKeyWithoutPlaintext",
        "kms:ReEncryptTo",
        "kms:ReEncryptFrom"
      ],
      "Resource": "*",
      "Condition": {
        "ForAnyValue:StringEquals": {
          "kms:EncryptionContextKeys": "aws:datazone:domainId"
        },
        "StringLike": {
          "kms:ViaService": "datazone.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "S3Kms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:aws:s3:arn": "false"
        },
        "StringLike": {
          "kms:ViaService": "s3.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "SchedulerKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:aws:scheduler:schedule:arn": "false"
        }
      }
    },
    {
      "Sid": "SecretsKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:SecretARN": "false"
        },
        "StringLike": {
          "kms:ViaService": "secretsmanager.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "SageMakerKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "kms:ReEncryptTo",
        "kms:ReEncryptFrom"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContextKeys": "false"
        },
        "StringLike": {
          "kms:ViaService": "sagemaker.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "SageMakerCreateGrant",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant"
      ],
      "Resource": "*",
      "Condition": {
        "StringLike": {
          "kms:ViaService": "sagemaker.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "DataZoneCreateGrant",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant"
      ],
      "Resource": "*",
      "Condition": {
        "ForAllValues:StringEquals": {
          "kms:GrantOperations": [
            "Encrypt",
            "Decrypt",
            "ReEncryptFrom",
            "ReEncryptTo",
            "GenerateDataKeyWithoutPlaintext",
            "GenerateDataKey",
            "DescribeKey",
            "RetireGrant",
            "CreateGrant"
          ]
        },
        "StringLike": {
          "kms:ViaService": "datazone.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "GlueKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContextKeys": "false"
        },
        "StringLike": {
          "kms:ViaService": "glue.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "BedrockKms",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant",
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContextKeys": "false"
        },
        "StringLike": {
          "kms:ViaService": "bedrock.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "WorkflowsCreateGrant",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant"
      ],
      "Resource": "arn:*:kms:*:*:key/*",
      "Condition": {
        "ForAllValues:StringEquals": {
          "kms:GrantOperations": [
            "Decrypt",
            "Encrypt",
            "GenerateDataKey",
            "GenerateDataKeyWithoutPlaintext",
            "RetireGrant"
          ]
        },
        "ForAnyValue:StringEquals": {
          "kms:EncryptionContextKeys": "aws:airflow-serverless:workflow-arn"
        },
        "StringLike": {
          "kms:ViaService": "airflow-serverless.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "WorkflowsKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext"
      ],
      "Resource": "arn:*:kms:*:*:key/*",
      "Condition": {
        "ForAnyValue:StringEquals": {
          "kms:EncryptionContextKeys": "aws:airflow-serverless:workflow-arn"
        }
      }
    },
    {
      "Sid": "CreateSG",
      "Effect": "Allow",
      "Action": [
        "ec2:CreateSecurityGroup"
      ],
      "Resource": [
        "arn:aws:ec2:*:*:security-group/*",
        "arn:aws:ec2:*:*:vpc/*"
      ]
    },
    {
      "Sid": "SGManage",
      "Effect": "Allow",
      "Action": [
        "ec2:DeleteSecurityGroup",
        "ec2:RevokeSecurityGroupEgress",
        "ec2:RevokeSecurityGroupIngress"
      ],
      "Resource": [
        "arn:aws:ec2:*:*:security-group/*"
      ]
    },
    {
      "Sid": "SGAuth",
      "Effect": "Allow",
      "Action": [
        "ec2:AuthorizeSecurityGroupEgress",
        "ec2:AuthorizeSecurityGroupIngress"
      ],
      "Resource": [
        "arn:aws:ec2:*:*:security-group/*"
      ],
      "Condition": {
        "Null": {
          "aws:ResourceTag/AmazonDataZoneProject": "false"
        }
      }
    },
    {
      "Sid": "Ec2DescribeOnly",
      "Effect": "Allow",
      "Action": "ec2:Describe*",
      "Resource": "*"
    },
    {
      "Sid": "SGCreateTags",
      "Effect": "Allow",
      "Action": [
        "ec2:CreateTags"
      ],
      "Resource": "arn:aws:ec2:*:*:security-group/*",
      "Condition": {
        "ForAllValues:StringLike": {
          "aws:TagKeys": [
            "AmazonDataZone*",
            "for-use-with-amazon-emr-managed-policies",
            "aws:cloudformation:*"
          ]
        }
      }
    },
    {
      "Sid": "VpcAccess",
      "Effect": "Allow",
      "Action": [
        "ec2:CreateNetworkInterface",
        "ec2:DeleteNetworkInterface",
        "ec2:CreateNetworkInterfacePermission",
        "ec2:DeleteNetworkInterfacePermission",
        "ec2:CreateVpcEndpoint"
      ],
      "Resource": "*"
    },
    {
      "Sid": "EC2TagAccessForVpc",
      "Effect": "Allow",
      "Action": [
        "ec2:CreateTags",
        "ec2:DeleteTags"
      ],
      "Resource": [
        "arn:aws:ec2:*:*:network-interface/*"
      ]
    },
    {
      "Sid": "SSOApplicationPermissions",
      "Effect": "Allow",
      "Action": [
        "identitystore:DescribeUser",
        "identitystore:DescribeGroup",
        "sso:CreateApplication",
        "sso:DeleteApplication",
        "sso:DescribeInstance",
        "sso:DescribeApplication",
        "sso:PutApplicationGrant",
        "sso:PutApplicationAssignmentConfiguration",
        "sso:PutApplicationAuthenticationMethod",
        "sso:PutApplicationAccessScope",
        "sso:UpdateApplication",
        "sso:CreateApplicationAssignment",
        "sso:DeleteApplicationAssignment"
      ],
      "Resource": "*",
      "Condition": {
        "Bool": {
          "aws:ViaAWSService": "true"
        }
      }
    },
    {
      "Sid": "SSOReadOnlyPermissions",
      "Effect": "Allow",
      "Action": [
        "sso:ListInstances",
        "organizations:DescribeOrganization"
      ],
      "Resource": "*"
    },
    {
      "Sid": "SSOKMSPermissions",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:aws:sso:instance-arn": "false"
        },
        "StringLike": {
          "kms:ViaService": "sso.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "IdentityStoreKMSPermissions",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:aws:identitystore:identitystore-arn": "false"
        },
        "StringLike": {
          "kms:ViaService": "identitystore.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "RAMReadOnlyPermissions",
      "Effect": "Allow",
      "Action": [
        "ram:Get*",
        "ram:List*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "RAMCreateResourcePermission",
      "Effect": "Allow",
      "Action": [
        "ram:CreateResourceShare"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "ram:RequestedResourceType": "datazone:Domain"
        }
      }
    },
    {
      "Sid": "RAMResourceSharePermissions",
      "Effect": "Allow",
      "Action": [
        "ram:AssociateResourceShare",
        "ram:DisassociateResourceShare",
        "ram:DeleteResourceShare"
      ],
      "Resource": "*",
      "Condition": {
        "StringLike": {
          "ram:ResourceShareName": [
            "DataZone*"
          ]
        }
      }
    },
    {
      "Sid": "RAMAssociateResourceSharePermission",
      "Effect": "Allow",
      "Action": "ram:AssociateResourceSharePermission",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "ram:PermissionArn": [
            "arn:aws:ram::aws:permission/AWSRAMDefaultPermissionAmazonDataZoneDomain",
            "arn:aws:ram::aws:permission/AWSRAMPermissionAmazonDataZoneDomainFullAccessWithPortalAccess",
            "arn:aws:ram::aws:permission/AWSRAMPermissionsAmazonDatazoneDomainExtendedServiceAccess",
            "arn:aws:ram::aws:permission/AWSRAMPermissionsAmazonDatazoneDomainExtendedServiceWithPortalAccess"
          ]
        }
      }
    },
    {
      "Sid": "TagLookup",
      "Effect": "Allow",
      "Action": [
        "tag:GetResources"
      ],
      "Resource": "*"
    }
  ]
}

Version history

Current version v25, edited by AWS on 2026-10-29. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

AWS CLI

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/SageMakerStudioAdminIAMPermissiveExecutionPolicy
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/SageMakerStudioAdminIAMPermissiveExecutionPolicy
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/SageMakerStudioAdminIAMPermissiveExecutionPolicy

CloudFormation

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/SageMakerStudioAdminIAMPermissiveExecutionPolicy

Terraform

resource "aws_iam_role_policy_attachment" "sagemakerstudioadminiampermissiveexecutionpolicy" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/SageMakerStudioAdminIAMPermissiveExecutionPolicy"
}

CDK (TypeScript)

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("SageMakerStudioAdminIAMPermissiveExecutionPolicy"),
);

Sources

SageMakerStudioAdminIAMPermissiveExecutionPolicy (AWS Managed Policy Reference Guide) (retrieved 2026-11-13; supports summary, practicalScope, useCases, securityConsiderations, assignmentGuidance, faqs)
AWS policy: SageMakerStudioAdminIAMPermissiveExecutionPolicy (Amazon SageMaker Unified Studio Administrator Guide) (retrieved 2026-11-13; supports summary, useCases, securityConsiderations, assignmentGuidance, faqs)
AWS managed policies for job functions (IAM User Guide) (retrieved 2026-11-12; supports bestPractices, faqs)
Managed policies and inline policies (IAM User Guide) (retrieved 2026-11-12; supports securityConsiderations, faqs)
Grant a user permissions to pass a role to an AWS service (IAM User Guide) (retrieved 2026-11-13; supports securityConsiderations)