Merge pull request #126 from JahedZ/main

Add missing permissions to the Pivot role, that block Dataset and MLStudio features under specific conditions.
data-dot-all · Sep 6, 2022 · 7cfac4f · 7cfac4f
2 parents 19ca19f + 6b7bdab
commit 7cfac4f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/deploy/pivot_role/pivotRole.yaml b/deploy/pivot_role/pivotRole.yaml
@@ -331,6 +331,7 @@ Resources:
              - 'sagemaker:ListNotebookInstances'
              - 'sagemaker:ListDomains'
              - 'sagemaker:ListApps'
+             - 'sagemaker:DeleteApp'
             Resource: '*'
           - Effect: Allow
             Action:
@@ -513,6 +514,7 @@ Resources:
               - 'lakeformation:GetTableObjects'
               - 'lakeformation:UpdateTableObjects'
               - 'lakeformation:DeleteObjectsOnCancel'
+              - 'lakeformation:DescribeResource'
             Resource: '*'
           - Sid: Compute
             Effect: Allow
@@ -659,4 +661,4 @@ Outputs:
     Description: Platform Pivot Role
     Value: PivotRole
     Export:
-      Name: !Sub '${AWS::StackName}-PivotRole'
+      Name: !Sub '${AWS::StackName}-PivotRole'