A banner message incorrectly states that there is apermissions issue when logged in using SSO.
Permission issue detected. You may not be able to open any applications.
To ensure full functionality, please update your permission or work with your administrator to allow sagemaker:CreatePresignedDomainUrl action in your execution role. Read more
Or revert to the Studio Classic experience. Read more
In our case, the execution role has the AmazonSageMakerFullAccess policy attached, which includes the sagemaker:CreatePresignedDomainUrl action on all resources.
Expected Behavior
No banner is shown.
Observed Behavior
Banner is shown. Probably a false-positive: browser console shows that a 400 response is received from a CreatePresignedDomainUrl request, because this API call is not supported for SSO authentication.
XHRPOST
https://api.sagemaker.us-east-1.amazonaws.com/
[HTTP/1.1 400 Bad Request 382ms]
__type "ValidationException"
message "Domain is using unsupported AuthMode: Sso"
Product Version
Issue Description
A banner message incorrectly states that there is apermissions issue when logged in using SSO.
In our case, the execution role has the
AmazonSageMakerFullAccess
policy attached, which includes thesagemaker:CreatePresignedDomainUrl
action on all resources.Expected Behavior
No banner is shown.
Observed Behavior
Banner is shown. Probably a false-positive: browser console shows that a 400 response is received from a
CreatePresignedDomainUrl
request, because this API call is not supported for SSO authentication.Product Category
No response
Feedback Category
User Interface
Other Details
No response