[Bug][mlops-multi-account-cdk][infra] cannot deploy default sagemaker templates

[Fatema]

Issue: When the Domain is configured to enable default sagemaker templates, the templates are visible in the account however when you try to deploy a default template you would get an error that an IAM role is missing.

Details: The following error is thrown in sagemaker console during the default project creation:

Error getting the details of Service Catalog Provisioning Parameters. Error message: ValidationException: Access denied while assuming the role arn:aws:iam::<account>:role/service-role/AmazonSageMakerServiceCatalogProductsLaunchRole. Args: {"productId":"prod-ft2gcemh5pdxo","provisioningArtifactId":"pa-o4esuesn5pxv4","pathId":"lpv2-huy4m7aigk6qg"}

Solution:

• [ ] Create Role that would handle the deployment of the default templates, role would need the following policy and must use the following name: "AmazonSageMakerServiceCatalogProductsLaunchRole"
• [ ] Rename the Role that is created in the template mlops-sm-project-template/mlops_sm_project_template/service_catalog_stack.py folder to "AmazonSageMakerServiceCatalogProductsLaunchRole"

Acceptance:

• [ ] Default SageMaker projects created successfully
• [ ] MLOps infra solution deployed successfully

Resources:

• https://docs.aws.amazon.com/sagemaker/latest/dg/security-iam-awsmanpol-sc.html