Fix SageMaker launch permissions (#1021)

* Fix SageMaker launch permissions Removes a duplicate SageMaker permission, and adds a missing permission for tagging. Closes #1018. * chore: trigger notification
awslabs · Aug 5, 2022 · f1cb58e · f1cb58e
1 parent 3282e8f
commit f1cb58e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/main/solution/post-deployment/config/infra/cloudformation.yml b/main/solution/post-deployment/config/infra/cloudformation.yml
@@ -424,7 +424,7 @@ Resources:
                 Action:
                   - sagemaker:DescribeNotebookInstance
                   - sagemaker:CreateNotebookInstance
-                  - sagemaker:StopNotebookInstance
+                  - sagemaker:AddTags
                   - sagemaker:StopNotebookInstance
                   - sagemaker:DeleteNotebookInstance
                 Resource: 'arn:aws:sagemaker:*:*:notebook-instance/basicnotebookinstance-*'