When should I attach SageMakerStudioUserIAMPermissiveExecutionPolicy?

The SageMaker Unified Studio Administrator Guide describes it as an execution policy for using IAM roles with SageMaker Unified Studio, granting users access to resources in your account. Attach it where users need that access through the service.

What are the security risks of SageMakerStudioUserIAMPermissiveExecutionPolicy?

AWS says the policy gives broad access to data resources and full access to all APIs of the services it covers. sts:AssumeRole is allowed on all resources. AWS managed policies do not grant least privilege permissions, and an AWS update to the policy affects every identity it is attached to.

SageMakerStudioUserIAMPermissiveExecutionPolicy

High privilegeAdminAWS managedActiveReviewedShow on map Compare

Summary

An execution policy for using IAM roles with Amazon SageMaker Unified Studio. The SageMaker Unified Studio Administrator Guide says it grants users access to resources in your account, including broad access to data resources.

Permissions imported from the AWS Managed Policy Reference Guide; other sections reviewed against the listed AWS sources.

Identity

ARN: arn:aws:iam::aws:policy/SageMakerStudioUserIAMPermissiveExecutionPolicy
Default version: v27
Created: 2025-08-18
Last edited: 2026-10-29
Services: airflow, airflow-serverless, application-autoscaling, athena, bedrock, bedrock-agentcore, cloudformation, cloudwatch, codeconnections, codestar-connections, codewhisperer, comprehend, datazone, dynamodb, ec2, ecr, ecr-public, elasticmapreduce, emr-containers, emr-serverless, events, glue, iam, identitystore, kms, lakeformation, logs, q, quicksight, rds, redshift, redshift-data, redshift-serverless, rekognition, resource-groups, s3, s3tables, sagemaker, sagemaker-data-science-assistant, sagemaker-mlflow, sagemaker-unified-studio-mcp, scheduler, secretsmanager, sqlworkbench, ssm, sso, sts, tag, textract, xray

Control-plane actions (3827)

By access level: 813 List, 136 Permissions management, 1013 Read, 69 Tagging, 1796 Write.

Control-plane actions by service
Service	Granted	Access levels and limits	Granted by
MWAA	All 12 actions (see the MWAA page)	1 List, 2 Read, 2 Tagging, 7 Write; 0 restricted, 0 conditional	airflow:*
MWAA Serverless	All 16 actions (see the MWAA Serverless page)	4 List, 5 Read, 2 Tagging, 5 Write; 0 restricted, 0 conditional	airflow-serverless:*
Application Auto Scaling	All 14 actions (see the Application Auto Scaling page)	1 List, 5 Read, 2 Tagging, 6 Write; 0 restricted, 0 conditional	application-autoscaling:*
Athena	All 86 actions (see the Athena page)	13 List, 35 Read, 2 Tagging, 36 Write; 0 restricted, 0 conditional	athena:*
Bedrock	All 232 actions (see the Bedrock page)	45 List, 1 Permissions management, 61 Read, 2 Tagging, 123 Write; 0 restricted, 0 conditional	bedrock:*
Bedrock-Agentcore	All 197 actions (see the Bedrock-Agentcore page)	38 List, 8 Permissions management, 45 Read, 2 Tagging, 104 Write; 0 restricted, 0 conditional	bedrock-agentcore:*
CloudFormation	All 104 actions (see the CloudFormation page)	23 List, 1 Permissions management, 34 Read, 2 Tagging, 44 Write; 103 restricted, 0 conditional	cloudformation:*, cloudformation:ValidateTemplate
CloudWatch	All 160 actions (see the CloudWatch page)	24 List, 8 Permissions management, 46 Read, 2 Tagging, 80 Write; 0 restricted, 0 conditional	cloudwatch:*
CodeConnections	5 of 38	2 List, 3 Read; 2 restricted, 2 conditional	codeconnections:GetConnection, codeconnections:GetHost, codeconnections:ListConnections, codeconnections:ListTagsForResource, codeconnections:UseConnection
CodeStar Connections	5 of 38	2 List, 3 Read; 2 restricted, 2 conditional	codestar-connections:GetConnection, codestar-connections:GetHost, codestar-connections:ListConnections, codestar-connections:ListTagsForResource, codestar-connections:UseConnection
CodeWhisperer	All 19 actions (see the CodeWhisperer page)	5 List, 1 Permissions management, 3 Read, 2 Tagging, 8 Write; 0 restricted, 0 conditional	codewhisperer:*
Comprehend	All 85 actions (see the Comprehend page)	50 Read, 2 Tagging, 33 Write; 0 restricted, 0 conditional	comprehend:*
DataZone	188 of 278	55 List, 2 Permissions management, 61 Read, 70 Write; 0 restricted, 0 conditional	datazone:Agent, datazone:DataApp, datazone:Notebook, datazone:AcceptPredictions, datazone:AcceptSubscriptionRequest, datazone:BatchGetAttributesMetadata, datazone:BatchGetCell, datazone:BatchGetCellRun, datazone:BatchPutAttributesMetadata, datazone:BatchUpdateNotifications, datazone:CancelMessage, datazone:CancelMetadataGenerationRun and 50 more
DynamoDB	26 of 68	7 List, 19 Read; 0 restricted, 0 conditional	dynamodb:Describe, dynamodb:List
EC2	202 of 834	195 List, 2 Permissions management, 2 Tagging, 3 Write; 2 restricted, 0 conditional	ec2:CreateNetworkInterface, ec2:CreateNetworkInterfacePermission, ec2:CreateTags, ec2:CreateVpcEndpoint, ec2:DeleteNetworkInterface, ec2:DeleteNetworkInterfacePermission, ec2:DeleteTags, ec2:Describe*
Elastic Container Registry	5 of 65	1 List, 4 Read; 0 restricted, 0 conditional	ecr:BatchCheckLayerAvailability, ecr:BatchGetImage, ecr:DescribeImages, ecr:GetAuthorizationToken, ecr:GetDownloadUrlForLayer
Elastic Container Registry Public	1 of 23	1 Read; 0 restricted, 0 conditional	ecr-public:GetAuthorizationToken
EMR	All 88 actions (see the EMR page)	12 List, 3 Permissions management, 20 Read, 2 Tagging, 51 Write; 0 restricted, 0 conditional	elasticmapreduce:*
EMR Containers	All 25 actions (see the EMR Containers page)	6 List, 5 Read, 2 Tagging, 12 Write; 0 restricted, 0 conditional	emr-containers:*
EMR Serverless	All 25 actions (see the EMR Serverless page)	4 List, 7 Read, 2 Tagging, 12 Write; 0 restricted, 0 conditional	emr-serverless:*
EventBridge	All 71 actions (see the EventBridge page)	15 List, 4 Permissions management, 12 Read, 2 Tagging, 38 Write; 0 restricted, 0 conditional	events:*
Glue	All 306 actions (see the Glue page)	27 List, 36 Permissions management, 93 Read, 2 Tagging, 148 Write; 0 restricted, 0 conditional	glue:*
IAM	4 of 190	1 List, 1 Read, 2 Write; 2 restricted, 1 conditional	iam:CreateServiceLinkedRole, iam:GetRole, iam:ListRoles, iam:PassRole
Identity Store	2 of 29	2 Read; 2 restricted, 2 conditional	identitystore:DescribeGroup, identitystore:DescribeUser
KMS	10 of 58	2 List, 1 Permissions management, 1 Read, 6 Write; 7 restricted, 7 conditional	kms:CreateGrant, kms:Decrypt, kms:DescribeKey, kms:Encrypt, kms:GenerateDataKey, kms:GenerateDataKeyWithoutPlaintext, kms:ListAliases, kms:ListGrants, kms:ReEncryptFrom, kms:ReEncryptTo
Lake Formation	8 of 68	2 List, 4 Permissions management, 1 Read, 1 Write; 0 restricted, 0 conditional	lakeformation:BatchGrantPermissions, lakeformation:BatchRevokePermissions, lakeformation:DescribeResource, lakeformation:GetDataAccess, lakeformation:GrantPermissions, lakeformation:ListPermissions, lakeformation:ListResources, lakeformation:RevokePermissions
CloudWatch Logs	All 133 actions (see the CloudWatch Logs page)	33 List, 2 Permissions management, 26 Read, 4 Tagging, 68 Write; 0 restricted, 0 conditional	logs:*
Q	All 54 actions (see the Q page)	8 List, 14 Read, 2 Tagging, 30 Write; 0 restricted, 0 conditional	q:*
QuickSight	All 357 actions (see the QuickSight page)	68 List, 19 Permissions management, 91 Read, 2 Tagging, 177 Write; 0 restricted, 0 conditional	quicksight:*
RDS	All 173 actions (see the RDS page)	47 List, 1 Permissions management, 5 Read, 2 Tagging, 118 Write; 0 restricted, 0 conditional	rds:*
Redshift	All 167 actions (see the Redshift page)	18 List, 13 Permissions management, 40 Read, 2 Tagging, 94 Write; 0 restricted, 0 conditional	redshift:*
Redshift Data API	All 12 actions (see the Redshift Data API page)	3 List, 6 Read, 3 Write; 0 restricted, 0 conditional	redshift-data:*
Redshift Serverless	All 69 actions (see the Redshift Serverless page)	15 List, 17 Read, 2 Tagging, 35 Write; 0 restricted, 0 conditional	redshift-serverless:*
Rekognition	All 76 actions (see the Rekognition page)	1 List, 36 Read, 2 Tagging, 37 Write; 0 restricted, 0 conditional	rekognition:*
Resource Groups	2 of 29	1 List, 1 Read; 0 restricted, 0 conditional	resource-groups:GetGroupQuery, resource-groups:ListGroupResources
S3	All 155 actions (see the S3 page)	15 List, 24 Permissions management, 58 Read, 8 Tagging, 50 Write; 0 restricted, 0 conditional	s3:*
S3 Tables	All 61 actions (see the S3 Tables page)	5 List, 4 Permissions management, 22 Read, 2 Tagging, 28 Write; 0 restricted, 0 conditional	s3tables:*
SageMaker	All 441 actions (see the SageMaker page)	96 List, 97 Read, 2 Tagging, 246 Write; 0 restricted, 0 conditional	sagemaker:*
SageMakerDataScienceAssistant	All 1 actions (see the SageMakerDataScienceAssistant page)	1 Write; 0 restricted, 0 conditional	sagemaker-data-science-assistant:*
SageMaker MLflow	All 61 actions (see the SageMaker MLflow page)	3 List, 17 Read, 41 Write; 0 restricted, 0 conditional	sagemaker-mlflow:*
SageMaker Unified Studio MCP	All 1 actions (see the SageMaker Unified Studio MCP page)	1 Read; 0 restricted, 0 conditional	sagemaker-unified-studio-mcp:*
EventBridge Scheduler	All 13 actions (see the EventBridge Scheduler page)	3 List, 3 Read, 2 Tagging, 5 Write; 0 restricted, 0 conditional	scheduler:*
Secrets Manager	8 of 27	1 List, 1 Permissions management, 2 Read, 4 Write; 7 restricted, 7 conditional	secretsmanager:CreateSecret, secretsmanager:DeleteSecret, secretsmanager:DescribeSecret, secretsmanager:GetSecretValue, secretsmanager:ListSecrets, secretsmanager:PutResourcePolicy, secretsmanager:PutSecretValue, secretsmanager:UpdateSecret
SQL Workbench	All 79 actions (see the SQL Workbench page)	9 List, 23 Read, 2 Tagging, 45 Write; 0 restricted, 0 conditional	sqlworkbench:*
Systems Manager	4 of 164	4 Read; 4 restricted, 0 conditional	ssm:GetParameter*
IAM Identity Center	2 of 126	2 Read; 2 restricted, 2 conditional	sso:DescribeApplication, sso:DescribeInstance
STS	4 of 16	1 Read, 1 Tagging, 2 Write; 2 restricted, 2 conditional	sts:AssumeRole, sts:GetServiceBearerToken, sts:SetSourceIdentity, sts:TagSession
Resource Group Tagging	1 of 9	1 Read; 0 restricted, 0 conditional	tag:GetResources
Textract	All 25 actions (see the Textract page)	14 Read, 2 Tagging, 9 Write; 0 restricted, 0 conditional	textract:*
X-Ray	All 32 actions (see the X-Ray page)	2 List, 1 Permissions management, 13 Read, 2 Tagging, 14 Write; 0 restricted, 0 conditional	xray:*

CodeConnections: 5 actions

codeconnections:GetConnection (Read)
codeconnections:GetHost (Read)
codeconnections:ListConnections (List)
codeconnections:ListTagsForResource (List)
codeconnections:UseConnection (Read)

CodeStar Connections: 5 actions

codestar-connections:GetConnection (Read)
codestar-connections:GetHost (Read)
codestar-connections:ListConnections (List)
codestar-connections:ListTagsForResource (List)
codestar-connections:UseConnection (Read)

DataZone: 188 actions

datazone:AcceptPredictions (Write)
datazone:AcceptSubscriptionRequest (Write)
datazone:BatchGetAttributesMetadata (Read)
datazone:BatchGetCell (Read)
datazone:BatchGetCellRun (Read)
datazone:BatchPutAttributesMetadata (Write)
datazone:BatchUpdateNotifications (Write)
datazone:CancelMessage (Write)
datazone:CancelMetadataGenerationRun (Write)
datazone:CancelSubscription (Write)
datazone:CreateAsset (Write)
datazone:CreateAssetFilter (Write)
datazone:CreateAssetRevision (Write)
datazone:CreateAssetType (Write)
datazone:CreateCell (Write)
datazone:CreateCellRun (Write)
datazone:CreateConnection (Write)
datazone:CreateDataApp (Write)
datazone:CreateEnvironment (Write)
datazone:CreateListingChangeSet (Write)
datazone:CreateNotebook (Write)
datazone:CreateProject (Write)
datazone:CreateProjectMembership (Write)
datazone:CreateSubscriptionGrant (Write)
datazone:CreateSubscriptionRequest (Write)
datazone:DeleteAgentApprovalPolicy (Write)
datazone:DeleteAsset (Write)
datazone:DeleteAssetFilter (Write)
datazone:DeleteAssetType (Write)
datazone:DeleteCell (Write)
datazone:DeleteCellRun (Write)
datazone:DeleteConnection (Write)
datazone:DeleteConversation (Write)
datazone:DeleteDataApp (Write)
datazone:DeleteEnvironment (Write)
datazone:DeleteListing (Write)
datazone:DeleteNotebook (Write)
datazone:DeleteProject (Write)
datazone:DeleteProjectMembership (Write)
datazone:DeleteSubscriptionGrant (Write)
datazone:DeleteSubscriptionRequest (Write)
datazone:DeregisterAgentArtifact (Write)
datazone:GenerateCode (Write)
datazone:GetAccountPool (Read)
datazone:GetAgentApprovalPolicy (Read)
datazone:GetAsset (Read)
datazone:GetAssetFilter (Read)
datazone:GetAssetType (Read)
datazone:GetCell (Read)
datazone:GetCellRun (Read)
datazone:GetCellRunResult (Read)
datazone:GetCompute (Read)
datazone:GetConnection (Read)
datazone:GetConversation (Read)
datazone:GetCurrentEffectivePolicy (Read)
datazone:GetDataApp (Read)
datazone:GetDataExportConfiguration (Read)
datazone:GetDataProduct (Read)
datazone:GetDataSource (Read)
datazone:GetDataSourceRun (Read)
datazone:GetDesignation (Read)
datazone:GetDomain (Read)
datazone:GetDomainExecutionRoleCredentials (Read)
datazone:GetDomainSharingPolicy (Read)
datazone:GetDomainUnit (Read)
datazone:GetEffectiveUICustomization (Read)
datazone:GetEnvironment (Read)
datazone:GetEnvironmentAction (Read)
datazone:GetEnvironmentActionLink (Read)
datazone:GetEnvironmentBlueprint (Read)
datazone:GetEnvironmentBlueprintConfiguration (Read)
datazone:GetEnvironmentCredentials (Read)
datazone:GetEnvironmentProfile (Read)
datazone:GetFormType (Read)
datazone:GetGlossary (Read)
datazone:GetGlossaryTerm (Read)
datazone:GetGroupProfile (Read)
datazone:GetIamPortalLoginUrl (Permissions management)
datazone:GetJobRun (Read)
datazone:GetLineageEvent (Read)
datazone:GetLineageNode (Read)
datazone:GetListing (Read)
datazone:GetMetadataGenerationRun (Read)
datazone:GetNotebook (Read)
datazone:GetNotebookCompute (Read)
datazone:GetNotebookExport (Read)
datazone:GetNotebookRun (Read)
datazone:GetNotificationPreference (Read)
datazone:GetProject (Read)
datazone:GetProjectProfile (Read)
datazone:GetRule (Read)
datazone:GetSubscription (Read)
datazone:GetSubscriptionEligibility (Read)
datazone:GetSubscriptionGrant (Read)
datazone:GetSubscriptionRequestDetails (Read)
datazone:GetSubscriptionTarget (Read)
datazone:GetSystemTableExportConfiguration (Read)
datazone:GetTimeSeriesDataPoint (Read)
datazone:GetUIConfiguration (Read)
datazone:GetUpdateEligibility (Read)
datazone:GetUserProfile (Read)
datazone:InvokeAgent (Write)
datazone:ListAccountEnvironments (List)
datazone:ListAccountPools (List)
datazone:ListAccountsInAccountPool (List)
datazone:ListAgentArtifacts (List)
datazone:ListAgentSessionRecords (List)
datazone:ListAssetFilters (List)
datazone:ListAssetRevisions (List)
datazone:ListCellRuns (List)
datazone:ListConnections (List)
datazone:ListConversations (List)
datazone:ListDataApps (List)
datazone:ListDataProductRevisions (List)
datazone:ListDataSourceRunActivities (List)
datazone:ListDataSourceRuns (List)
datazone:ListDataSources (List)
datazone:ListDeployableEnvironmentBlueprints (List)
datazone:ListDesignations (List)
datazone:ListDomainUnitsForParent (List)
datazone:ListDomains (List)
datazone:ListEntityOwners (List)
datazone:ListEnvironmentActions (List)
datazone:ListEnvironmentBlueprintConfigurationSummaries (List)
datazone:ListEnvironmentBlueprintConfigurations (List)
datazone:ListEnvironmentBlueprints (List)
datazone:ListEnvironmentProfiles (List)
datazone:ListEnvironments (List)
datazone:ListGroupsForUser (List)
datazone:ListJobRuns (List)
datazone:ListLineageEvents (List)
datazone:ListLineageNodeHistory (List)
datazone:ListLinkedTypes (List)
datazone:ListMetadataGenerationRuns (List)
datazone:ListNotebookRuns (List)
datazone:ListNotebooks (List)
datazone:ListNotifications (List)
datazone:ListPolicyGrants (List)
datazone:ListProjectMemberships (List)
datazone:ListProjectProfiles (List)
datazone:ListProjects (List)
datazone:ListRules (List)
datazone:ListSharedDataApps (List)
datazone:ListSubscriptionGrants (List)
datazone:ListSubscriptionRequests (List)
datazone:ListSubscriptionTargets (List)
datazone:ListSubscriptions (List)
datazone:ListTagsForResource (Read)
datazone:ListTimeSeriesDataPoints (List)
datazone:ListUIConfigurations (List)
datazone:ListWarehouseMetadata (List)
datazone:PostLineageEvent (Write)
datazone:PutAgentApprovalPolicy (Write)
datazone:PutCellRunResult (Write)
datazone:QueryGraph (List)
datazone:RegisterAgentArtifact (Write)
datazone:RejectPredictions (Write)
datazone:RejectSubscriptionRequest (Write)
datazone:RevokeSubscription (Permissions management)
datazone:Search (List)
datazone:SearchGroupProfiles (List)
datazone:SearchListings (List)
datazone:SearchRules (List)
datazone:SearchTypes (List)
datazone:SearchUserProfiles (List)
datazone:SendMessage (Write)
datazone:StartCompute (Write)
datazone:StartConversation (Write)
datazone:StartMetadataGenerationRun (Write)
datazone:StartNotebookCompute (Write)
datazone:StartNotebookExport (Write)
datazone:StartNotebookImport (Write)
datazone:StartNotebookRun (Write)
datazone:StartNotebookSync (Write)
datazone:StopAgent (Write)
datazone:StopCompute (Write)
datazone:StopNotebookCompute (Write)
datazone:StopNotebookRun (Write)
datazone:UpdateAssetFilter (Write)
datazone:UpdateCell (Write)
datazone:UpdateCellRun (Write)
datazone:UpdateConnection (Write)
datazone:UpdateConversation (Write)
datazone:UpdateDataApp (Write)
datazone:UpdateEnvironment (Write)
datazone:UpdateNotebook (Write)
datazone:UpdateProject (Write)
datazone:UpdateSubscriptionRequest (Write)

DynamoDB: 26 actions

dynamodb:DescribeBackup (Read)
dynamodb:DescribeBulkOperation (Read)
dynamodb:DescribeContinuousBackups (Read)
dynamodb:DescribeContributorInsights (Read)
dynamodb:DescribeEndpoints (Read)
dynamodb:DescribeExport (Read)
dynamodb:DescribeGlobalTable (Read)
dynamodb:DescribeGlobalTableSettings (Read)
dynamodb:DescribeImport (Read)
dynamodb:DescribeKinesisStreamingDestination (Read)
dynamodb:DescribeLimits (Read)
dynamodb:DescribeReservedCapacity (Read)
dynamodb:DescribeReservedCapacityOfferings (Read)
dynamodb:DescribeStream (Read)
dynamodb:DescribeTable (Read)
dynamodb:DescribeTableReplicaAutoScaling (Read)
dynamodb:DescribeTimeToLive (Read)
dynamodb:ListBackups (List)
dynamodb:ListBulkOperations (List)
dynamodb:ListContributorInsights (List)
dynamodb:ListExports (List)
dynamodb:ListGlobalTables (List)
dynamodb:ListImports (List)
dynamodb:ListStreams (Read)
dynamodb:ListTables (List)
dynamodb:ListTagsOfResource (Read)

EC2: 202 actions

ec2:CreateNetworkInterface (Write)
ec2:CreateNetworkInterfacePermission (Permissions management)
ec2:CreateTags (Tagging)
ec2:CreateVpcEndpoint (Write)
ec2:DeleteNetworkInterface (Write)
ec2:DeleteNetworkInterfacePermission (Permissions management)
ec2:DeleteTags (Tagging)
ec2:DescribeAccountAttributes (List)
ec2:DescribeAccountVpcEncryptionControl (List)
ec2:DescribeAddressTransfers (List)
ec2:DescribeAddresses (List)
ec2:DescribeAddressesAttribute (List)
ec2:DescribeAggregateIdFormat (List)
ec2:DescribeApplicationStatus (List)
ec2:DescribeApplicationStatusCheckAssociations (List)
ec2:DescribeApplicationStatusChecks (List)
ec2:DescribeAvailabilityZones (List)
ec2:DescribeAwsNetworkPerformanceMetricSubscriptions (List)
ec2:DescribeBundleTasks (List)
ec2:DescribeByoipCidrs (List)
ec2:DescribeCapacityBlockExtensionHistory (List)
ec2:DescribeCapacityBlockExtensionOfferings (List)
ec2:DescribeCapacityBlockOfferings (List)
ec2:DescribeCapacityBlockStatus (List)
ec2:DescribeCapacityBlocks (List)
ec2:DescribeCapacityManagerDataExports (List)
ec2:DescribeCapacityReservationBillingRequests (List)
ec2:DescribeCapacityReservationCancellationQuotes (List)
ec2:DescribeCapacityReservationDateChangeQuotes (List)
ec2:DescribeCapacityReservationFleets (List)
ec2:DescribeCapacityReservationTopology (List)
ec2:DescribeCapacityReservations (List)
ec2:DescribeCarrierGateways (List)
ec2:DescribeClassicLinkInstances (List)
ec2:DescribeClientVpnAuthorizationRules (List)
ec2:DescribeClientVpnConnections (List)
ec2:DescribeClientVpnEndpoints (List)
ec2:DescribeClientVpnRoutes (List)
ec2:DescribeClientVpnTargetNetworks (List)
ec2:DescribeCoipPools (List)
ec2:DescribeConversionTasks (List)
ec2:DescribeCustomerGateways (List)
ec2:DescribeDeclarativePoliciesReports (List)
ec2:DescribeDhcpOptions (List)
ec2:DescribeEgressOnlyInternetGateways (List)
ec2:DescribeElasticGpus (List)
ec2:DescribeExportImageTasks (List)
ec2:DescribeExportTasks (List)
ec2:DescribeFastLaunchImages (List)
ec2:DescribeFastSnapshotRestores (List)
ec2:DescribeFleetHistory (List)
ec2:DescribeFleetInstances (List)
ec2:DescribeFleets (List)
ec2:DescribeFlowLogs (List)
ec2:DescribeFpgaImageAttribute (List)
ec2:DescribeFpgaImages (List)
ec2:DescribeHostReservationOfferings (List)
ec2:DescribeHostReservations (List)
ec2:DescribeHosts (List)
ec2:DescribeIamInstanceProfileAssociations (List)
ec2:DescribeIdFormat (List)
ec2:DescribeIdentityIdFormat (List)
ec2:DescribeImageAttribute (List)
ec2:DescribeImageReferences (List)
ec2:DescribeImageUsageReportEntries (List)
ec2:DescribeImageUsageReports (List)
ec2:DescribeImages (List)
ec2:DescribeImportImageTasks (List)
ec2:DescribeImportSnapshotTasks (List)
ec2:DescribeInstanceAttribute (List)
ec2:DescribeInstanceConnectEndpoints (List)
ec2:DescribeInstanceCreditSpecifications (List)
ec2:DescribeInstanceEventNotificationAttributes (List)
ec2:DescribeInstanceEventWindows (List)
ec2:DescribeInstanceImageMetadata (List)
ec2:DescribeInstanceSqlHaHistoryStates (List)
ec2:DescribeInstanceSqlHaStates (List)
ec2:DescribeInstanceStatus (List)
ec2:DescribeInstanceTopology (List)
ec2:DescribeInstanceTypeOfferings (List)
ec2:DescribeInstanceTypes (List)
ec2:DescribeInstances (List)
ec2:DescribeInternetGateways (List)
ec2:DescribeIpamByoasn (List)
ec2:DescribeIpamExternalResourceVerificationTokens (List)
ec2:DescribeIpamInternetRegistryAssociations (List)
ec2:DescribeIpamPolicies (List)
ec2:DescribeIpamPoolAllocations (List)
ec2:DescribeIpamPools (List)
ec2:DescribeIpamPrefixListResolverTargets (List)
ec2:DescribeIpamPrefixListResolvers (List)
ec2:DescribeIpamResourceDiscoveries (List)
ec2:DescribeIpamResourceDiscoveryAssociations (List)
ec2:DescribeIpamScopes (List)
ec2:DescribeIpams (List)
ec2:DescribeIpv6Pools (List)
ec2:DescribeKeyPairs (List)
ec2:DescribeLaunchTemplateVersions (List)
ec2:DescribeLaunchTemplates (List)
ec2:DescribeLocalGatewayRouteTablePermissions (List)
ec2:DescribeLocalGatewayRouteTableVirtualInterfaceGroupAssociations (List)
ec2:DescribeLocalGatewayRouteTableVpcAssociations (List)
ec2:DescribeLocalGatewayRouteTables (List)
ec2:DescribeLocalGatewayVirtualInterfaceGroups (List)
ec2:DescribeLocalGatewayVirtualInterfaces (List)
ec2:DescribeLocalGateways (List)
ec2:DescribeLockedSnapshots (List)
ec2:DescribeMacHosts (List)
ec2:DescribeMacModificationTasks (List)
ec2:DescribeManagedPrefixLists (List)
ec2:DescribeMovingAddresses (List)
ec2:DescribeNatGateways (List)
ec2:DescribeNetworkAcls (List)
ec2:DescribeNetworkInsightsAccessScopeAnalyses (List)
ec2:DescribeNetworkInsightsAccessScopes (List)
ec2:DescribeNetworkInsightsAnalyses (List)
ec2:DescribeNetworkInsightsPaths (List)
ec2:DescribeNetworkInterfaceAttribute (List)
ec2:DescribeNetworkInterfacePermissions (List)
ec2:DescribeNetworkInterfaces (List)
ec2:DescribeOutpostLags (List)
ec2:DescribePlacementGroups (List)
ec2:DescribePrefixLists (List)
ec2:DescribePrincipalIdFormat (List)
ec2:DescribePublicIpv4Pools (List)
ec2:DescribeRegions (List)
ec2:DescribeReplaceRootVolumeTasks (List)
ec2:DescribeReservedInstances (List)
ec2:DescribeReservedInstancesListings (List)
ec2:DescribeReservedInstancesModifications (List)
ec2:DescribeReservedInstancesOfferings (List)
ec2:DescribeRouteServerEndpoints (List)
ec2:DescribeRouteServerPeers (List)
ec2:DescribeRouteServers (List)
ec2:DescribeRouteTables (List)
ec2:DescribeScheduledInstanceAvailability (List)
ec2:DescribeScheduledInstances (List)
ec2:DescribeSecondaryInterfaces (List)
ec2:DescribeSecondaryNetworks (List)
ec2:DescribeSecondarySubnets (List)
ec2:DescribeSecurityGroupReferences (List)
ec2:DescribeSecurityGroupRules (List)
ec2:DescribeSecurityGroupVpcAssociations (List)
ec2:DescribeSecurityGroups (List)
ec2:DescribeServiceLinkVirtualInterfaces (List)
ec2:DescribeSnapshotAttribute (List)
ec2:DescribeSnapshotTierStatus (List)
ec2:DescribeSnapshots (List)
ec2:DescribeSpotDatafeedSubscription (List)
ec2:DescribeSpotFleetInstances (List)
ec2:DescribeSpotFleetRequestHistory (List)
ec2:DescribeSpotFleetRequests (List)
ec2:DescribeSpotInstanceRequests (List)
ec2:DescribeSpotPriceHistory (List)
ec2:DescribeStaleSecurityGroups (List)
ec2:DescribeStoreImageTasks (List)
ec2:DescribeSubnets (List)
ec2:DescribeTags (List)
ec2:DescribeTrafficMirrorFilterRules (List)
ec2:DescribeTrafficMirrorFilters (List)
ec2:DescribeTrafficMirrorSessions (List)
ec2:DescribeTrafficMirrorTargets (List)
ec2:DescribeTransitGatewayAttachments (List)
ec2:DescribeTransitGatewayConnectPeers (List)
ec2:DescribeTransitGatewayConnects (List)
ec2:DescribeTransitGatewayMeteringPolicies (List)
ec2:DescribeTransitGatewayMulticastDomains (List)
ec2:DescribeTransitGatewayPeeringAttachments (List)
ec2:DescribeTransitGatewayPolicyTables (List)
ec2:DescribeTransitGatewayRouteTableAnnouncements (List)
ec2:DescribeTransitGatewayRouteTables (List)
ec2:DescribeTransitGatewayVpcAttachments (List)
ec2:DescribeTransitGateways (List)
ec2:DescribeTrunkInterfaceAssociations (List)
ec2:DescribeVerifiedAccessEndpoints (List)
ec2:DescribeVerifiedAccessGroups (List)
ec2:DescribeVerifiedAccessInstanceLoggingConfigurations (List)
ec2:DescribeVerifiedAccessInstanceWebAclAssociations (List)
ec2:DescribeVerifiedAccessInstances (List)
ec2:DescribeVerifiedAccessTrustProviders (List)
ec2:DescribeVolumeAttribute (List)
ec2:DescribeVolumeStatus (List)
ec2:DescribeVolumes (List)
ec2:DescribeVolumesModifications (List)
ec2:DescribeVpcAttribute (List)
ec2:DescribeVpcBlockPublicAccessExclusions (List)
ec2:DescribeVpcBlockPublicAccessOptions (List)
ec2:DescribeVpcClassicLink (List)
ec2:DescribeVpcClassicLinkDnsSupport (List)
ec2:DescribeVpcEncryptionControls (List)
ec2:DescribeVpcEndpointAssociations (List)
ec2:DescribeVpcEndpointConnectionNotifications (List)
ec2:DescribeVpcEndpointConnections (List)
ec2:DescribeVpcEndpointServiceConfigurations (List)
ec2:DescribeVpcEndpointServicePermissions (List)
ec2:DescribeVpcEndpointServices (List)
ec2:DescribeVpcEndpoints (List)
ec2:DescribeVpcPeeringConnections (List)
ec2:DescribeVpcs (List)
ec2:DescribeVpnConcentrators (List)
ec2:DescribeVpnConnections (List)
ec2:DescribeVpnGateways (List)

Elastic Container Registry: 5 actions

ecr:BatchCheckLayerAvailability (Read)
ecr:BatchGetImage (Read)
ecr:DescribeImages (List)
ecr:GetAuthorizationToken (Read)
ecr:GetDownloadUrlForLayer (Read)

Elastic Container Registry Public: 1 actions

ecr-public:GetAuthorizationToken (Read)

IAM: 4 actions

iam:CreateServiceLinkedRole (Write)
iam:GetRole (Read)
iam:ListRoles (List)
iam:PassRole (Write)

Identity Store: 2 actions

identitystore:DescribeGroup (Read)
identitystore:DescribeUser (Read)

KMS: 10 actions

kms:CreateGrant (Permissions management)
kms:Decrypt (Write)
kms:DescribeKey (Read)
kms:Encrypt (Write)
kms:GenerateDataKey (Write)
kms:GenerateDataKeyWithoutPlaintext (Write)
kms:ListAliases (List)
kms:ListGrants (List)
kms:ReEncryptFrom (Write)
kms:ReEncryptTo (Write)

Lake Formation: 8 actions

lakeformation:BatchGrantPermissions (Permissions management)
lakeformation:BatchRevokePermissions (Permissions management)
lakeformation:DescribeResource (Read)
lakeformation:GetDataAccess (Write)
lakeformation:GrantPermissions (Permissions management)
lakeformation:ListPermissions (List)
lakeformation:ListResources (List)
lakeformation:RevokePermissions (Permissions management)

Resource Groups: 2 actions

resource-groups:GetGroupQuery (Read)
resource-groups:ListGroupResources (List)

Secrets Manager: 8 actions

secretsmanager:CreateSecret (Write)
secretsmanager:DeleteSecret (Write)
secretsmanager:DescribeSecret (Read)
secretsmanager:GetSecretValue (Read)
secretsmanager:ListSecrets (List)
secretsmanager:PutResourcePolicy (Permissions management)
secretsmanager:PutSecretValue (Write)
secretsmanager:UpdateSecret (Write)

Systems Manager: 4 actions

ssm:GetParameter (Read)
ssm:GetParameterHistory (Read)
ssm:GetParameters (Read)
ssm:GetParametersByPath (Read)

IAM Identity Center: 2 actions

sso:DescribeApplication (Read)
sso:DescribeInstance (Read)

STS: 4 actions

sts:AssumeRole (Write)
sts:GetServiceBearerToken (Read)
sts:SetSourceIdentity (Write)
sts:TagSession (Tagging)

Resource Group Tagging: 1 actions

tag:GetResources (Read)

Data-plane actions (169)

By access level: 23 List, 3 Permissions management, 65 Read, 4 Tagging, 74 Write.

Data-plane actions by service
Service	Granted	Access levels and limits	Granted by
MWAA	All 1 actions (see the MWAA page)	1 Write; 0 restricted, 0 conditional	airflow:*
Bedrock	All 37 actions (see the Bedrock page)	3 List, 22 Read, 12 Write; 0 restricted, 0 conditional	bedrock:*
Bedrock-Agentcore	All 62 actions (see the Bedrock-Agentcore page)	13 List, 13 Read, 36 Write; 0 restricted, 0 conditional	bedrock-agentcore:*
CloudWatch	All 5 actions (see the CloudWatch page)	1 List, 3 Read, 1 Write; 0 restricted, 0 conditional	cloudwatch:*
DynamoDB	3 of 17	3 Read; 0 restricted, 0 conditional	dynamodb:PartiQLSelect, dynamodb:Query, dynamodb:Scan
EventBridge	All 3 actions (see the EventBridge page)	3 Write; 0 restricted, 0 conditional	events:*
QuickSight	All 2 actions (see the QuickSight page)	1 Read, 1 Write; 0 restricted, 0 conditional	quicksight:*
S3	All 25 actions (see the S3 page)	3 List, 3 Permissions management, 8 Read, 4 Tagging, 7 Write; 0 restricted, 0 conditional	s3:*
SageMaker	All 19 actions (see the SageMaker page)	1 List, 7 Read, 11 Write; 0 restricted, 0 conditional	sagemaker:*
X-Ray	All 12 actions (see the X-Ray page)	2 List, 8 Read, 2 Write; 0 restricted, 0 conditional	xray:*

DynamoDB: 3 actions

dynamodb:PartiQLSelect (Read)
dynamodb:Query (Read)
dynamodb:Scan (Read)

Excluded and conditional actions

athena:GetResourceDashboard (deny-conditional, statement 2): 1 matching actions
athena:GetSession (deny-conditional, statement 2): 1 matching actions
athena:GetSessionEndpoint (deny-conditional, statement 2): 1 matching actions
athena:GetSessionStatus (deny-conditional, statement 2): 1 matching actions
athena:StartSession (deny-conditional, statement 2): 1 matching actions
athena:TerminateSession (deny-conditional, statement 2): 1 matching actions
elasticmapreduce:*Session* (deny-conditional, statement 2): 11 matching actions
emr-containers:*ManagedEndpoint* (deny-conditional, statement 2): 5 matching actions
emr-serverless:*Dashboard* (deny-conditional, statement 2): 2 matching actions
emr-serverless:*Session* (deny-conditional, statement 2): 5 matching actions
glue:CancelStatement (deny-conditional, statement 2): 1 matching actions
glue:CreateSession (deny-conditional, statement 2): 1 matching actions
glue:DeleteSession (deny-conditional, statement 2): 1 matching actions
glue:GetDashboardUrl (deny-conditional, statement 2): 1 matching actions
glue:GetSession (deny-conditional, statement 2): 1 matching actions
glue:GetSessionEndpoint (deny-conditional, statement 2): 1 matching actions
glue:GetStatement (deny-conditional, statement 2): 1 matching actions
glue:RunStatement (deny-conditional, statement 2): 1 matching actions
glue:StopSession (deny-conditional, statement 2): 1 matching actions
athena:TagResource (deny-conditional, statement 3): 1 matching actions
athena:UntagResource (deny-conditional, statement 3): 1 matching actions
elasticmapreduce:AddTags (deny-conditional, statement 3): 1 matching actions
elasticmapreduce:RemoveTags (deny-conditional, statement 3): 1 matching actions
emr-containers:*Resource (deny-conditional, statement 3): 3 matching actions
emr-serverless:*Resource (deny-conditional, statement 3): 3 matching actions
glue:TagResource (deny-conditional, statement 3): 1 matching actions
glue:UntagResource (deny-conditional, statement 3): 1 matching actions

Resource scope and attachment

Resource scope across granted actions: mixed.

Can be attached: Yes, to users, groups and roles.

Why this tier

Grants at least 80% of the write and permissions-management actions of: airflow (8 of 8), airflow-serverless (5 of 5), application-autoscaling (6 of 6), athena (36 of 36), bedrock (136 of 136), bedrock-agentcore (148 of 148), cloudwatch (89 of 89), codewhisperer (9 of 9), and 21 more.
Grants data-plane write actions on a data store on all resources without conditions.
Grants iam:PassRole, but only for scoped roles or under conditions (for example iam:PassedToService).
31 granted write or permissions-management actions have no data-plane classification from AWS, so the data-plane rule cannot assess them.

Guidance

Practical scope

The DataAccess and ComputeAccess statements allow service-wide wildcards on Resource "*", including s3:*, glue:*, logs:*, redshift:*, redshift-data:*, rds:*, athena:*, bedrock:*, sagemaker:*, elasticmapreduce:* and airflow:*. A DataZone statement allows 62 datazone actions, including datazone:Get*, datazone:List*, datazone:CreateAsset* and datazone:DeleteAsset*. iam:GetRole, iam:ListRoles, sts:AssumeRole and sts:GetServiceBearerToken are allowed on all resources. iam:PassRole is limited to roles under service-role/AmazonSageMaker* and to a listed set of target services. Lake Formation, Secrets Manager, KMS, DynamoDB, ECR, EC2 VPC, IAM Identity Center read and identity store read actions also appear. Deny statements apply to athena, emr-serverless, emr-containers, elasticmapreduce and glue session resources when the AmazonDataZoneSessionOwner tag does not match the source identity.

Use cases

Access the resources of SageMaker Unified Studio, including data and compute services, when using IAM roles.

Best practices

AWS managed policies don't grant least privilege permissions. The IAM User Guide suggests using IAM Access Analyzer to see which permissions principals actually use, then writing a custom policy or generating one with only the required permissions.

Security considerations

The guide says it provides full access to all APIs and resources for services used in SageMaker Unified Studio, such as S3, AWS Glue, Amazon Redshift, Athena, Amazon Bedrock and CloudWatch Logs.
iam:PassRole is limited to roles under service-role/AmazonSageMaker* and listed target services. The IAM User Guide says a user must have permission to pass a role to an AWS service before the service can be configured with that role. sts:AssumeRole is allowed on all resources, which the guide says is for accessing cross-account resources.
The Deny statements apply only to session resources, under a condition on the AmazonDataZoneSessionOwner tag.
You cannot change the permissions in an AWS managed policy. If AWS updates the policy, the update affects every user, group and role it is attached to.

Assignment guidance

You can attach this policy to your users, groups and roles. The reference page also links to guidance on creating a permission set using AWS managed policies in IAM Identity Center. The SageMaker Unified Studio Administrator Guide describes it as an execution policy for using IAM roles with SageMaker Unified Studio. Where a narrower scope is needed, AWS recommends customer managed policies specific to your use cases.

Same service

Same domain

Frequently asked questions

When should I attach SageMakerStudioUserIAMPermissiveExecutionPolicy?: The SageMaker Unified Studio Administrator Guide describes it as an execution policy for using IAM roles with SageMaker Unified Studio, granting users access to resources in your account. Attach it where users need that access through the service.
What does SageMakerStudioUserIAMPermissiveExecutionPolicy grant?: It allows service-wide actions on all resources for the data and compute services Unified Studio uses (including S3, Glue, Redshift, Athena, Bedrock, SageMaker and EMR), DataZone actions, role assumption, conditioned iam:PassRole, and Lake Formation, Secrets Manager, KMS, DynamoDB and ECR actions.
What are the security risks of SageMakerStudioUserIAMPermissiveExecutionPolicy?: AWS says the policy gives broad access to data resources and full access to all APIs of the services it covers. sts:AssumeRole is allowed on all resources. AWS managed policies do not grant least privilege permissions, and an AWS update to the policy affects every identity it is attached to.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "DataAccess",
      "Effect": "Allow",
      "Action": [
        "cloudwatch:*",
        "glue:*",
        "logs:*",
        "redshift-data:*",
        "redshift-serverless:*",
        "redshift:*",
        "s3:*",
        "s3tables:*",
        "comprehend:*",
        "textract:*",
        "rekognition:*",
        "sagemaker-data-science-assistant:*",
        "rds:*",
        "quicksight:*",
        "events:*",
        "xray:*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "ComputeAccess",
      "Effect": "Allow",
      "Action": [
        "athena:*",
        "bedrock:*",
        "bedrock-agentcore:*",
        "codewhisperer:*",
        "sagemaker-unified-studio-mcp:*",
        "elasticmapreduce:*",
        "emr-containers:*",
        "q:*",
        "sagemaker:*",
        "sagemaker-mlflow:*",
        "scheduler:*",
        "sqlworkbench:*",
        "emr-serverless:*",
        "airflow-serverless:*",
        "airflow:*",
        "application-autoscaling:*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "DenyForeignSessionAccess",
      "Effect": "Deny",
      "Action": [
        "athena:GetResourceDashboard",
        "athena:GetSession",
        "athena:GetSessionEndpoint",
        "athena:GetSessionStatus",
        "athena:StartSession",
        "athena:TerminateSession",
        "emr-serverless:*Session*",
        "emr-serverless:*Dashboard*",
        "emr-containers:*ManagedEndpoint*",
        "elasticmapreduce:*Session*",
        "glue:CancelStatement",
        "glue:CreateSession",
        "glue:DeleteSession",
        "glue:GetDashboardUrl",
        "glue:GetSession",
        "glue:GetSessionEndpoint",
        "glue:GetStatement",
        "glue:RunStatement",
        "glue:StopSession"
      ],
      "Resource": [
        "arn:aws:athena:*:*:workgroup/*/session/*",
        "arn:aws:emr-serverless:*:*:/applications/*/sessions/*",
        "arn:aws:emr-containers:*:*:/virtualclusters/*/endpoints/*",
        "arn:aws:elasticmapreduce:*:*:cluster/*/session/*",
        "arn:aws:glue:*:*:session/*"
      ],
      "Condition": {
        "StringNotEquals": {
          "aws:RequestTag/AmazonDataZoneSessionOwner": "${aws:SourceIdentity}",
          "aws:ResourceTag/AmazonDataZoneSessionOwner": "${aws:SourceIdentity}"
        }
      }
    },
    {
      "Sid": "DenyTaggingUntaggingForeignSessions",
      "Effect": "Deny",
      "Action": [
        "athena:TagResource",
        "athena:UntagResource",
        "emr-serverless:*Resource",
        "emr-containers:*Resource",
        "elasticmapreduce:AddTags",
        "elasticmapreduce:RemoveTags",
        "glue:TagResource",
        "glue:UntagResource"
      ],
      "Resource": [
        "arn:aws:athena:*:*:workgroup/*/session/*",
        "arn:aws:emr-serverless:*:*:/applications/*/sessions/*",
        "arn:aws:emr-containers:*:*:/virtualclusters/*/endpoints/*",
        "arn:aws:elasticmapreduce:*:*:cluster/*/session/*",
        "arn:aws:glue:*:*:session/*"
      ],
      "Condition": {
        "StringNotEquals": {
          "aws:ResourceTag/AmazonDataZoneSessionOwner": "${aws:SourceIdentity}"
        }
      }
    },
    {
      "Sid": "DataZone",
      "Effect": "Allow",
      "Action": [
        "datazone:AcceptPredictions",
        "datazone:AcceptSubscriptionRequest",
        "datazone:BatchUpdateNotifications",
        "datazone:BatchGetAttributesMetadata",
        "datazone:BatchPutAttributesMetadata",
        "datazone:CancelMetadataGenerationRun",
        "datazone:CancelSubscription",
        "datazone:CreateAsset*",
        "datazone:CreateConnection",
        "datazone:CreateEnvironment",
        "datazone:CreateListingChangeSet",
        "datazone:CreateProject",
        "datazone:CreateProjectMembership",
        "datazone:CreateSubscriptionGrant",
        "datazone:CreateSubscriptionRequest",
        "datazone:DeleteAsset*",
        "datazone:DeleteConnection",
        "datazone:DeleteEnvironment",
        "datazone:DeleteListing",
        "datazone:DeleteProject",
        "datazone:DeleteProjectMembership",
        "datazone:DeleteSubscriptionGrant",
        "datazone:DeleteSubscriptionRequest",
        "datazone:Get*",
        "datazone:List*",
        "datazone:PostLineageEvent",
        "datazone:RejectPredictions",
        "datazone:RejectSubscriptionRequest",
        "datazone:RevokeSubscription",
        "datazone:Search",
        "datazone:SearchListings",
        "datazone:SearchRules",
        "datazone:SearchTypes",
        "datazone:SearchUserProfiles",
        "datazone:SearchGroupProfiles",
        "datazone:StartMetadataGenerationRun",
        "datazone:UpdateAssetFilter",
        "datazone:UpdateConnection",
        "datazone:UpdateEnvironment",
        "datazone:UpdateProject",
        "datazone:UpdateSubscriptionRequest",
        "datazone:*Notebook*",
        "datazone:CreateCell",
        "datazone:UpdateCell",
        "datazone:DeleteCell",
        "datazone:BatchGetCell",
        "datazone:CreateCellRun",
        "datazone:UpdateCellRun",
        "datazone:DeleteCellRun",
        "datazone:BatchGetCellRun",
        "datazone:PutCellRunResult",
        "datazone:StartConversation",
        "datazone:GenerateCode",
        "datazone:SendMessage",
        "datazone:CancelMessage",
        "datazone:QueryGraph",
        "datazone:StartCompute",
        "datazone:StopCompute",
        "datazone:*Agent*",
        "datazone:DeleteConversation",
        "datazone:UpdateConversation",
        "datazone:*DataApp*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "CfnManage",
      "Effect": "Allow",
      "Action": [
        "cloudformation:*"
      ],
      "Resource": [
        "arn:aws:cloudformation:*:*:stack/DataZone*"
      ]
    },
    {
      "Sid": "ValidateCfn",
      "Effect": "Allow",
      "Action": "cloudformation:ValidateTemplate",
      "Resource": "*"
    },
    {
      "Sid": "IamSts",
      "Effect": "Allow",
      "Action": [
        "iam:GetRole",
        "iam:ListRoles",
        "sts:AssumeRole",
        "ecr-public:GetAuthorizationToken",
        "sts:GetServiceBearerToken"
      ],
      "Resource": "*"
    },
    {
      "Sid": "CreateSLR",
      "Effect": "Allow",
      "Action": "iam:CreateServiceLinkedRole",
      "Resource": [
        "arn:aws:iam::*:role/aws-service-role/neptune-graph.amazonaws.com/AWSServiceRoleForNeptuneGraph",
        "arn:aws:iam::*:role/aws-service-role/redshift.amazonaws.com/AWSServiceRoleForRedshift",
        "arn:aws:iam::*:role/aws-service-role/sagemaker.amazonaws.com/AWSServiceRoleForAmazonSageMakerNotebooks",
        "arn:aws:iam::*:role/aws-service-role/ops.emr-serverless.amazonaws.com/AWSServiceRoleForAmazonEMRServerless",
        "arn:aws:iam::*:role/aws-service-role/airflow.amazonaws.com/AWSServiceRoleForAmazonMWAA",
        "arn:aws:iam::*:role/aws-service-role/airflow-serverless.amazonaws.com/AWSServiceRoleForAmazonMWAAServerless",
        "arn:aws:iam::*:role/aws-service-role/elasticmapreduce.amazonaws.com/AWSServiceRoleForEMRCleanup",
        "arn:aws:iam::*:role/aws-service-role/sagemaker.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_SageMakerEndpoint",
        "arn:aws:iam::*:role/aws-service-role/observability.aoss.amazonaws.com/AWSServiceRoleForAmazonOpenSearchServerless",
        "arn:aws:iam::*:role/aws-service-role/runtime-identity.bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreRuntimeIdentity",
        "arn:aws:iam::*:role/aws-service-role/network.bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreNetwork",
        "arn:aws:iam::*:role/aws-service-role/bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreGatewayNetwork",
        "arn:aws:iam::*:role/aws-service-role/identity-network.bedrock-agentcore.amazonaws.com/AWSServiceRoleForBedrockAgentCoreIdentity"
      ]
    },
    {
      "Sid": "TagSession",
      "Effect": "Allow",
      "Action": "sts:TagSession",
      "Resource": "*",
      "Condition": {
        "ForAllValues:StringLike": {
          "aws:TagKeys": [
            "AmazonDataZone*"
          ]
        }
      }
    },
    {
      "Sid": "PassRole",
      "Effect": "Allow",
      "Action": "iam:PassRole",
      "Resource": [
        "arn:aws:iam::*:role/service-role/AmazonSageMaker*"
      ],
      "Condition": {
        "StringEquals": {
          "iam:PassedToService": [
            "sagemaker.amazonaws.com",
            "lakeformation.amazonaws.com",
            "glue.amazonaws.com",
            "bedrock.amazonaws.com",
            "bedrock-agentcore.amazonaws.com",
            "agent-registry.amazonaws.com",
            "redshift-serverless.amazonaws.com",
            "redshift.amazonaws.com",
            "scheduler.amazonaws.com",
            "emr-serverless.amazonaws.com",
            "elasticmapreduce.amazonaws.com",
            "airflow-serverless.amazonaws.com",
            "pods.eks.amazonaws.com",
            "access-grants.s3.amazonaws.com"
          ]
        }
      }
    },
    {
      "Sid": "SourceIdentity",
      "Effect": "Allow",
      "Action": "sts:SetSourceIdentity",
      "Resource": "*",
      "Condition": {
        "StringLike": {
          "sts:SourceIdentity": "${aws:PrincipalTag/datazone:userId}"
        }
      }
    },
    {
      "Sid": "SSM",
      "Effect": "Allow",
      "Action": [
        "ssm:GetParameter*"
      ],
      "Resource": [
        "arn:aws:ssm:*:*:parameter/amazon/datazone/q*",
        "arn:aws:ssm:*:*:parameter/amazon/datazone/genAI/*",
        "arn:aws:ssm:*::parameter/aws/service/sagemaker-distribution/*"
      ]
    },
    {
      "Sid": "LFAccess",
      "Effect": "Allow",
      "Action": [
        "lakeformation:BatchGrantPermissions",
        "lakeformation:BatchRevokePermissions",
        "lakeformation:DescribeResource",
        "lakeformation:GetDataAccess",
        "lakeformation:GrantPermissions",
        "lakeformation:ListResources",
        "lakeformation:ListPermissions",
        "lakeformation:RevokePermissions"
      ],
      "Resource": "*"
    },
    {
      "Sid": "FederatedConn",
      "Effect": "Allow",
      "Action": [
        "dynamodb:List*",
        "dynamodb:Describe*",
        "dynamodb:Scan",
        "dynamodb:PartiQLSelect",
        "dynamodb:Query",
        "secretsmanager:ListSecrets",
        "resource-groups:GetGroupQuery",
        "resource-groups:ListGroupResources"
      ],
      "Resource": "*"
    },
    {
      "Sid": "PrivateSecret",
      "Effect": "Allow",
      "Action": [
        "secretsmanager:CreateSecret",
        "secretsmanager:DeleteSecret",
        "secretsmanager:DescribeSecret",
        "secretsmanager:GetSecretValue",
        "secretsmanager:UpdateSecret",
        "secretsmanager:PutResourcePolicy",
        "secretsmanager:PutSecretValue"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "aws:ResourceTag/AmazonDataZoneProject": "${datazone:projectId}"
        }
      }
    },
    {
      "Sid": "SharedSecret",
      "Effect": "Allow",
      "Action": [
        "secretsmanager:CreateSecret",
        "secretsmanager:DescribeSecret",
        "secretsmanager:GetSecretValue",
        "secretsmanager:UpdateSecret",
        "secretsmanager:PutSecretValue"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "aws:ResourceTag/for-use-with-all-datazone-projects": "true"
        }
      }
    },
    {
      "Sid": "Ecr",
      "Effect": "Allow",
      "Action": [
        "ecr:BatchCheckLayerAvailability",
        "ecr:BatchGetImage",
        "ecr:DescribeImages",
        "ecr:GetAuthorizationToken",
        "ecr:GetDownloadUrlForLayer"
      ],
      "Resource": "*"
    },
    {
      "Sid": "CodeConnectionsUser",
      "Effect": "Allow",
      "Action": [
        "codeconnections:GetConnection",
        "codeconnections:UseConnection",
        "codestar-connections:GetConnection",
        "codestar-connections:UseConnection"
      ],
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "aws:ResourceTag/for-use-with-all-datazone-projects": "true"
        }
      }
    },
    {
      "Sid": "CodeConnectionsUserList",
      "Effect": "Allow",
      "Action": [
        "codeconnections:GetHost",
        "codeconnections:ListConnections",
        "codeconnections:ListTagsForResource",
        "codestar-connections:GetHost",
        "codestar-connections:ListConnections",
        "codestar-connections:ListTagsForResource"
      ],
      "Resource": "*"
    },
    {
      "Sid": "KmsListAndDescribe",
      "Effect": "Allow",
      "Action": [
        "kms:DescribeKey",
        "kms:ListAliases",
        "kms:ListGrants"
      ],
      "Resource": "*"
    },
    {
      "Sid": "DataZoneKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:GenerateDataKey",
        "kms:Encrypt",
        "kms:GenerateDataKeyWithoutPlaintext",
        "kms:ReEncryptTo",
        "kms:ReEncryptFrom"
      ],
      "Resource": "*",
      "Condition": {
        "ForAnyValue:StringEquals": {
          "kms:EncryptionContextKeys": "aws:datazone:domainId"
        },
        "StringLike": {
          "kms:ViaService": "datazone.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "S3Kms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:aws:s3:arn": "false"
        },
        "StringLike": {
          "kms:ViaService": "s3.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "SchedulerKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:aws:scheduler:schedule:arn": "false"
        }
      }
    },
    {
      "Sid": "SecretsKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContext:SecretARN": "false"
        },
        "StringLike": {
          "kms:ViaService": "secretsmanager.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "SageMakerKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "kms:ReEncryptTo",
        "kms:ReEncryptFrom"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContextKeys": "false"
        },
        "StringLike": {
          "kms:ViaService": "sagemaker.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "SageMakerCreateGrant",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant"
      ],
      "Resource": "*",
      "Condition": {
        "StringLike": {
          "kms:ViaService": "sagemaker.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "DataZoneCreateGrant",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant"
      ],
      "Resource": "*",
      "Condition": {
        "ForAllValues:StringEquals": {
          "kms:GrantOperations": [
            "Encrypt",
            "Decrypt",
            "ReEncryptFrom",
            "ReEncryptTo",
            "GenerateDataKeyWithoutPlaintext",
            "GenerateDataKey",
            "DescribeKey",
            "RetireGrant",
            "CreateGrant"
          ]
        },
        "StringLike": {
          "kms:ViaService": "datazone.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "GlueKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContextKeys": "false"
        },
        "StringLike": {
          "kms:ViaService": "glue.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "BedrockKms",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant",
        "kms:Decrypt",
        "kms:GenerateDataKey"
      ],
      "Resource": "*",
      "Condition": {
        "Null": {
          "kms:EncryptionContextKeys": "false"
        },
        "StringLike": {
          "kms:ViaService": "bedrock.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "WorkflowsCreateGrant",
      "Effect": "Allow",
      "Action": [
        "kms:CreateGrant"
      ],
      "Resource": "arn:*:kms:*:*:key/*",
      "Condition": {
        "ForAllValues:StringEquals": {
          "kms:GrantOperations": [
            "Decrypt",
            "Encrypt",
            "GenerateDataKey",
            "GenerateDataKeyWithoutPlaintext",
            "RetireGrant"
          ]
        },
        "ForAnyValue:StringEquals": {
          "kms:EncryptionContextKeys": "aws:airflow-serverless:workflow-arn"
        },
        "StringLike": {
          "kms:ViaService": "airflow-serverless.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "WorkflowsKms",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext"
      ],
      "Resource": "arn:*:kms:*:*:key/*",
      "Condition": {
        "ForAnyValue:StringEquals": {
          "kms:EncryptionContextKeys": "aws:airflow-serverless:workflow-arn"
        }
      }
    },
    {
      "Sid": "Ec2DescribeOnly",
      "Effect": "Allow",
      "Action": "ec2:Describe*",
      "Resource": "*"
    },
    {
      "Sid": "VpcAccess",
      "Effect": "Allow",
      "Action": [
        "ec2:CreateNetworkInterface",
        "ec2:DeleteNetworkInterface",
        "ec2:CreateNetworkInterfacePermission",
        "ec2:DeleteNetworkInterfacePermission",
        "ec2:CreateVpcEndpoint"
      ],
      "Resource": "*"
    },
    {
      "Sid": "EC2TagAccessForVpc",
      "Effect": "Allow",
      "Action": [
        "ec2:CreateTags",
        "ec2:DeleteTags"
      ],
      "Resource": [
        "arn:aws:ec2:*:*:network-interface/*"
      ]
    },
    {
      "Sid": "TagLookup",
      "Effect": "Allow",
      "Action": [
        "tag:GetResources"
      ],
      "Resource": "*"
    },
    {
      "Sid": "SSOInstanceReadOnlyPermissions",
      "Effect": "Allow",
      "Action": [
        "sso:DescribeInstance",
        "sso:DescribeApplication"
      ],
      "Resource": [
        "arn:aws:sso:::instance/*",
        "arn:aws:sso::*:application/*/*"
      ],
      "Condition": {
        "Bool": {
          "aws:ViaAWSService": "true"
        }
      }
    },
    {
      "Sid": "IdentityStoreReadOnlyPermissions",
      "Effect": "Allow",
      "Action": [
        "identitystore:DescribeUser",
        "identitystore:DescribeGroup"
      ],
      "Resource": [
        "arn:aws:identitystore::*:identitystore/*",
        "arn:aws:identitystore:::user/*",
        "arn:aws:identitystore:::group/*"
      ],
      "Condition": {
        "Bool": {
          "aws:ViaAWSService": "true"
        }
      }
    }
  ]
}

Version history

Current version v27, edited by AWS on 2026-10-29. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

AWS CLI

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/SageMakerStudioUserIAMPermissiveExecutionPolicy
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/SageMakerStudioUserIAMPermissiveExecutionPolicy
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/SageMakerStudioUserIAMPermissiveExecutionPolicy

CloudFormation

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/SageMakerStudioUserIAMPermissiveExecutionPolicy

Terraform

resource "aws_iam_role_policy_attachment" "sagemakerstudiouseriampermissiveexecutionpolicy" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/SageMakerStudioUserIAMPermissiveExecutionPolicy"
}

CDK (TypeScript)

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("SageMakerStudioUserIAMPermissiveExecutionPolicy"),
);

Sources

SageMakerStudioUserIAMPermissiveExecutionPolicy (AWS Managed Policy Reference Guide) (retrieved 2026-11-13; supports summary, practicalScope, useCases, securityConsiderations, assignmentGuidance, faqs)
AWS policy: SageMakerStudioUserIAMPermissiveExecutionPolicy (Amazon SageMaker Unified Studio Administrator Guide) (retrieved 2026-11-13; supports summary, useCases, securityConsiderations, assignmentGuidance, faqs)
AWS managed policies for job functions (IAM User Guide) (retrieved 2026-11-12; supports bestPractices, faqs)
Managed policies and inline policies (IAM User Guide) (retrieved 2026-11-12; supports securityConsiderations, faqs)
Grant a user permissions to pass a role to an AWS service (IAM User Guide) (retrieved 2026-11-13; supports securityConsiderations)