From f1cb58ed7695d4efc9cda815c1b45f786295f2d7 Mon Sep 17 00:00:00 2001
From: Tim Malone <tdmalone@users.noreply.github.com>
Date: Fri, 5 Aug 2022 16:56:33 +1000
Subject: [PATCH] Fix SageMaker launch permissions (#1021)

* Fix SageMaker launch permissions

Removes a duplicate SageMaker permission, and adds a missing permission for tagging.
Closes #1018.

* chore: trigger notification
---
 main/solution/post-deployment/config/infra/cloudformation.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/main/solution/post-deployment/config/infra/cloudformation.yml b/main/solution/post-deployment/config/infra/cloudformation.yml
index c446a62f3b..93ef7aef59 100644
--- a/main/solution/post-deployment/config/infra/cloudformation.yml
+++ b/main/solution/post-deployment/config/infra/cloudformation.yml
@@ -424,7 +424,7 @@ Resources:
                 Action:
                   - sagemaker:DescribeNotebookInstance
                   - sagemaker:CreateNotebookInstance
-                  - sagemaker:StopNotebookInstance
+                  - sagemaker:AddTags
                   - sagemaker:StopNotebookInstance
                   - sagemaker:DeleteNotebookInstance
                 Resource: 'arn:aws:sagemaker:*:*:notebook-instance/basicnotebookinstance-*'