aws-samples / sagemaker-custom-project-templates

MIT No Attribution
215 stars 156 forks source link

[Bug][mlops-multi-account-cdk][infra] cannot deploy default sagemaker templates #40

Open Fatema opened 2 years ago

Fatema commented 2 years ago

Issue: When the Domain is configured to enable default sagemaker templates, the templates are visible in the account however when you try to deploy a default template you would get an error that an IAM role is missing.

Details: The following error is thrown in sagemaker console during the default project creation:

Error getting the details of Service Catalog Provisioning Parameters. Error message: ValidationException: Access denied while assuming the role arn:aws:iam::<account>:role/service-role/AmazonSageMakerServiceCatalogProductsLaunchRole. Args: {"productId":"prod-ft2gcemh5pdxo","provisioningArtifactId":"pa-o4esuesn5pxv4","pathId":"lpv2-huy4m7aigk6qg"}

Solution:

Acceptance:

Resources: