@cloud-copilot/iam-data 0.19.202607031 → 0.19.202607151

package/data/actions/sagemaker.json

@@ -1,7 +1,6 @@
 {
   "accessmodelpackage": {
     "name": "AccessModelPackage",
-    "isPermissionOnly": true,
     "description": "Grants permission to access model package that can be used in Amazon SageMaker training or hosting services",
     "accessLevel": "Read",
     "resourceTypes": [
@@ -15,6 +14,179 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "callwithbearertoken": {
+    "name": "CallWithBearerToken",
+    "description": "Grants permission to use bearer token in SageMaker Job and Inference runtime endpoints APIs",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [
+      "sagemaker:BearerTokenType"
+    ],
+    "dependentActions": []
+  },
+  "createreservedcapacity": {
+    "name": "CreateReservedCapacity",
+    "description": "Grants permission to create a reserved capacity",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "reserved-capacity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createsharedmodel": {
+    "name": "CreateSharedModel",
+    "description": "Grants permission to create a shared model in a SageMaker Studio application",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "shared-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants AWS Resource Access Manager permission to delete a resource policy on a SageMaker resource that supports cross-account sharing",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describeclusterinference": {
+    "name": "DescribeClusterInference",
+    "description": "Grants permission to get information about the inference operator for a SageMaker HyperPod cluster",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "describesharedmodel": {
+    "name": "DescribeSharedModel",
+    "description": "Grants permission to describe a shared model in a SageMaker Studio application",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "shared-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants AWS Resource Access Manager permission to retrieve a resource policy on a SageMaker resource that supports cross-account sharing",
+    "accessLevel": "Read",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsharedmodelevents": {
+    "name": "ListSharedModelEvents",
+    "description": "Grants permission to list shared model events",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsharedmodelversions": {
+    "name": "ListSharedModelVersions",
+    "description": "Grants permission to list shared model versions",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "shared-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listsharedmodels": {
+    "name": "ListSharedModels",
+    "description": "Grants permission to list shared models",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants AWS Resource Access Manager permission to create a resource policy on a SageMaker resource that supports cross-account sharing",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "sendsharedmodelevent": {
+    "name": "SendSharedModelEvent",
+    "description": "Grants permission to send a shared model event",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "shared-model-event",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updateclusterinference": {
+    "name": "UpdateClusterInference",
+    "description": "Grants permission to update the inference operator for a SageMaker HyperPod cluster",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "cluster",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatesharedmodel": {
+    "name": "UpdateSharedModel",
+    "description": "Grants permission to update a shared model",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "shared-model",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "addassociation": {
     "name": "AddAssociation",
     "description": "Grants permission to associate a lineage entity (artifact, context, action, experiment, experiment-trial-component) to each other",
@@ -57,7 +229,7 @@
   "addtags": {
     "name": "AddTags",
     "description": "Grants permission to add or overwrite one or more tags for the specified Amazon SageMaker resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "action",
@@ -321,9 +493,9 @@
         "name": "model-package",
         "required": false,
         "conditionKeys": [
-          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
           "sagemaker:CurrentModelLifeCycleStage",
-          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+          "sagemaker:CurrentModelLifeCycleStageStatus"
         ],
         "dependentActions": []
       },
@@ -477,11 +649,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:AttachVolume",
-      "ec2:DescribeVolumes",
-      "eks:DescribeCluster"
-    ]
+    "dependentActions": []
   },
   "batchaddclusternodes": {
     "name": "BatchAddClusterNodes",
@@ -496,9 +664,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "eks:DescribeCluster"
-    ]
+    "dependentActions": []
   },
   "batchdeleteclusternodes": {
     "name": "BatchDeleteClusterNodes",
@@ -513,9 +679,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "eks:DescribeCluster"
-    ]
+    "dependentActions": []
   },
   "batchdescribemodelpackage": {
     "name": "BatchDescribeModelPackage",
@@ -525,15 +689,15 @@
       {
         "name": "model-package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentModelLifeCycleStageStatus"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:CurrentModelLifeCycleStageStatus",
-      "sagemaker:CurrentModelLifeCycleStage",
-      "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "batchgetmetrics": {
@@ -638,17 +802,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "callwithbearertoken": {
-    "name": "CallWithBearerToken",
-    "isPermissionOnly": true,
-    "description": "Grants permission to use bearer token in SageMaker Job and Inference runtime endpoints APIs",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [
-      "sagemaker:BearerTokenType"
-    ],
-    "dependentActions": []
-  },
   "completerollout": {
     "name": "CompleteRollout",
     "description": "Grants permission to mark a rollout as complete for a job",
@@ -727,9 +880,7 @@
         "name": "action",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -747,9 +898,7 @@
         "name": "algorithm",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -767,17 +916,15 @@
         "name": "app",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "sagemaker:InstanceTypes",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
+      "sagemaker:InstanceTypes",
       "sagemaker:OwnerUserProfileArn",
       "sagemaker:SpaceSharingType",
       "sagemaker:StudioLifecycleConfigArns"
@@ -793,9 +940,7 @@
         "name": "app-image-config",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -813,9 +958,7 @@
         "name": "artifact",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -833,10 +976,7 @@
         "name": "automl-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -859,10 +999,7 @@
         "name": "automl-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -885,20 +1022,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeImages",
-          "ec2:DescribeSnapshots",
-          "ec2:ModifyImageAttribute",
-          "ec2:ModifySnapshotAttribute",
-          "eks:AssociateAccessPolicy",
-          "eks:CreateAccessEntry",
-          "eks:DeleteAccessEntry",
-          "eks:DescribeAccessEntry",
-          "eks:DescribeCluster",
-          "iam:CreateServiceLinkedRole",
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "reserved-capacity",
@@ -931,13 +1055,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "eks:AssociateAccessPolicy",
-          "eks:DescribeCluster",
-          "eks:ListAssociatedAccessPolicies",
-          "sagemaker:AddTags",
-          "sagemaker:DescribeCluster"
-        ]
+        "dependentActions": []
       },
       {
         "name": "cluster-scheduler-config",
@@ -961,9 +1079,7 @@
         "name": "code-repository",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -981,10 +1097,7 @@
         "name": "compilation-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1002,13 +1115,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "eks:AssociateAccessPolicy",
-          "eks:DescribeCluster",
-          "eks:ListAssociatedAccessPolicies",
-          "sagemaker:AddTags",
-          "sagemaker:DescribeCluster"
-        ]
+        "dependentActions": []
       },
       {
         "name": "compute-quota",
@@ -1032,9 +1139,7 @@
         "name": "context",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1052,10 +1157,7 @@
         "name": "data-quality-job-definition",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1081,10 +1183,7 @@
         "name": "device-fleet",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1102,25 +1201,21 @@
         "name": "domain",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:CreateServiceLinkedRole",
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "sagemaker:AppNetworkAccessType",
-      "sagemaker:InstanceTypes",
-      "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:VpcSubnets",
       "sagemaker:DomainSharingOutputKmsKeyArn",
-      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
-      "sagemaker:StudioLifecycleConfigArns"
+      "sagemaker:InstanceTypes",
+      "sagemaker:StudioLifecycleConfigArns",
+      "sagemaker:VolumeKmsKeyArn",
+      "sagemaker:VpcSecurityGroupIds",
+      "sagemaker:VpcSubnets"
     ],
     "dependentActions": []
   },
@@ -1133,10 +1228,7 @@
         "name": "edge-deployment-plan",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1154,10 +1246,7 @@
         "name": "edge-deployment-plan",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1175,10 +1264,7 @@
         "name": "edge-packaging-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1196,9 +1282,7 @@
         "name": "endpoint",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "endpoint-config",
@@ -1222,10 +1306,7 @@
         "name": "endpoint-config",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1234,10 +1315,10 @@
       "sagemaker:AcceleratorTypes",
       "sagemaker:InstanceTypes",
       "sagemaker:ModelArn",
-      "sagemaker:VolumeKmsKeyArn",
+      "sagemaker:NetworkIsolation",
       "sagemaker:ServerlessMaxConcurrency",
       "sagemaker:ServerlessMemorySize",
-      "sagemaker:NetworkIsolation",
+      "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
       "sagemaker:VpcSubnets"
     ],
@@ -1252,9 +1333,7 @@
         "name": "experiment",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1272,21 +1351,18 @@
         "name": "feature-group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "sagemaker:FeatureGroupOnlineStoreKmsKeyArn",
-      "sagemaker:FeatureGroupOfflineStoreKmsKeyArn",
-      "sagemaker:FeatureGroupOfflineStoreS3Uri",
+      "sagemaker:FeatureGroupDisableGlueTableCreation",
       "sagemaker:FeatureGroupEnableOnlineStore",
       "sagemaker:FeatureGroupOfflineStoreConfig",
-      "sagemaker:FeatureGroupDisableGlueTableCreation"
+      "sagemaker:FeatureGroupOfflineStoreKmsKeyArn",
+      "sagemaker:FeatureGroupOfflineStoreS3Uri",
+      "sagemaker:FeatureGroupOnlineStoreKmsKeyArn"
     ],
     "dependentActions": []
   },
@@ -1299,17 +1375,14 @@
         "name": "flow-definition",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "sagemaker:WorkteamArn",
-      "sagemaker:WorkteamType",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "sagemaker:WorkteamArn",
+      "sagemaker:WorkteamType"
     ],
     "dependentActions": []
   },
@@ -1322,9 +1395,7 @@
         "name": "hub",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1363,9 +1434,7 @@
         "name": "hub",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "hub-content",
@@ -1389,9 +1458,7 @@
         "name": "human-task-ui",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1409,10 +1476,7 @@
         "name": "hyper-parameter-tuning-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1442,10 +1506,7 @@
         "name": "image",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1478,9 +1539,7 @@
         "name": "endpoint",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "inference-component",
@@ -1505,10 +1564,7 @@
         "name": "inference-experiment",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1526,10 +1582,7 @@
         "name": "inference-recommendations-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1547,10 +1600,7 @@
         "name": "job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1571,19 +1621,16 @@
         "name": "labeling-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "sagemaker:WorkteamArn",
-      "sagemaker:WorkteamType",
-      "sagemaker:VolumeKmsKeyArn",
-      "sagemaker:OutputKmsKeyArn",
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
+      "sagemaker:WorkteamArn",
+      "sagemaker:WorkteamType"
     ],
     "dependentActions": []
   },
@@ -1604,10 +1651,7 @@
         "name": "mlflow-app",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1625,13 +1669,10 @@
         "name": "mlflow-tracking-server",
         "required": true,
         "conditionKeys": [
-          "sagemaker:ResourceTag/${TagKey}",
-          "aws:ResourceTag/${TagKey}"
+          "aws:ResourceTag/${TagKey}",
+          "sagemaker:ResourceTag/${TagKey}"
         ],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1649,19 +1690,16 @@
         "name": "model",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "sagemaker:DirectGatedModelAccess",
       "sagemaker:NetworkIsolation",
       "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:VpcSubnets",
-      "sagemaker:DirectGatedModelAccess"
+      "sagemaker:VpcSubnets"
     ],
     "dependentActions": []
   },
@@ -1674,10 +1712,7 @@
         "name": "model-bias-job-definition",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1703,9 +1738,7 @@
         "name": "model-card",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1738,10 +1771,7 @@
         "name": "model-explainability-job-definition",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1767,20 +1797,18 @@
         "name": "model-package",
         "required": false,
         "conditionKeys": [
-          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
           "sagemaker:CurrentModelLifeCycleStage",
-          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+          "sagemaker:CurrentModelLifeCycleStageStatus"
         ],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "sagemaker:ModelApprovalStatus",
       "sagemaker:CustomerMetadataProperties/${MetadataKey}",
+      "sagemaker:ModelApprovalStatus",
       "sagemaker:ModelLifeCycle:Stage",
       "sagemaker:ModelLifeCycle:StageStatus"
     ],
@@ -1795,9 +1823,7 @@
         "name": "model-package-group",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1815,10 +1841,7 @@
         "name": "model-quality-job-definition",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1844,10 +1867,7 @@
         "name": "monitoring-schedule",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1873,10 +1893,7 @@
         "name": "notebook-instance",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1903,9 +1920,7 @@
         "name": "notebook-instance-lifecycle-config",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1923,10 +1938,7 @@
         "name": "optimization-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1944,9 +1956,7 @@
         "name": "partner-app",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1979,10 +1989,7 @@
         "name": "pipeline",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2029,14 +2036,14 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "sagemaker:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:ResourceTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "createpresignednotebookinstanceurl": {
@@ -2063,81 +2070,39 @@
         "name": "processing-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys",
-      "sagemaker:InstanceTypes",
-      "sagemaker:MaxRuntimeInSeconds",
-      "sagemaker:NetworkIsolation",
-      "sagemaker:OutputKmsKeyArn",
-      "sagemaker:VolumeKmsKeyArn",
-      "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:VpcSubnets",
-      "sagemaker:InterContainerTrafficEncryption"
-    ],
-    "dependentActions": []
-  },
-  "createproject": {
-    "name": "CreateProject",
-    "description": "Grants permission to create a Project",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "project",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
-      }
-    ],
-    "conditionKeys": [
-      "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
-    ],
-    "dependentActions": []
-  },
-  "createreservedcapacity": {
-    "name": "CreateReservedCapacity",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a reserved capacity",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "reserved-capacity",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
-      "aws:TagKeys"
+      "aws:TagKeys",
+      "sagemaker:InstanceTypes",
+      "sagemaker:InterContainerTrafficEncryption",
+      "sagemaker:MaxRuntimeInSeconds",
+      "sagemaker:NetworkIsolation",
+      "sagemaker:OutputKmsKeyArn",
+      "sagemaker:VolumeKmsKeyArn",
+      "sagemaker:VpcSecurityGroupIds",
+      "sagemaker:VpcSubnets"
     ],
     "dependentActions": []
   },
-  "createsharedmodel": {
-    "name": "CreateSharedModel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to create a shared model in a SageMaker Studio application",
+  "createproject": {
+    "name": "CreateProject",
+    "description": "Grants permission to create a Project",
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "shared-model",
+        "name": "project",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createspace": {
@@ -2149,17 +2114,15 @@
         "name": "space",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "sagemaker:InstanceTypes",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
+      "sagemaker:InstanceTypes",
       "sagemaker:OwnerUserProfileArn",
       "sagemaker:RemoteAccess",
       "sagemaker:SpaceSharingType",
@@ -2176,9 +2139,7 @@
         "name": "studio-lifecycle-config",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2193,17 +2154,14 @@
     "accessLevel": "Write",
     "resourceTypes": [
       {
-        "name": "training-job",
-        "required": true,
+        "name": "reserved-capacity",
+        "required": false,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       },
       {
-        "name": "reserved-capacity",
-        "required": false,
+        "name": "training-job",
+        "required": true,
         "conditionKeys": [],
         "dependentActions": []
       },
@@ -2217,21 +2175,21 @@
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
+      "sagemaker:DirectGatedModelAccess",
+      "sagemaker:EnableRemoteDebug",
       "sagemaker:FileSystemAccessMode",
       "sagemaker:FileSystemDirectoryPath",
       "sagemaker:FileSystemId",
       "sagemaker:FileSystemType",
       "sagemaker:InstanceTypes",
       "sagemaker:InterContainerTrafficEncryption",
+      "sagemaker:KeepAlivePeriod",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
       "sagemaker:OutputKmsKeyArn",
       "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:VpcSubnets",
-      "sagemaker:KeepAlivePeriod",
-      "sagemaker:EnableRemoteDebug",
-      "sagemaker:DirectGatedModelAccess"
+      "sagemaker:VpcSubnets"
     ],
     "dependentActions": []
   },
@@ -2244,10 +2202,7 @@
         "name": "training-plan",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags",
-          "sagemaker:CreateReservedCapacity"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2265,9 +2220,7 @@
         "name": "transform-job",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2289,9 +2242,7 @@
         "name": "experiment",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "experiment-trial",
@@ -2315,9 +2266,7 @@
         "name": "experiment-trial-component",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2335,21 +2284,18 @@
         "name": "user-profile",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole",
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
-      "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:InstanceTypes",
       "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
-      "sagemaker:StudioLifecycleConfigArns"
+      "sagemaker:InstanceTypes",
+      "sagemaker:StudioLifecycleConfigArns",
+      "sagemaker:VpcSecurityGroupIds"
     ],
     "dependentActions": []
   },
@@ -2362,9 +2308,7 @@
         "name": "workforce",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2382,9 +2326,7 @@
         "name": "workteam",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -2568,9 +2510,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "eks:DeleteAccessEntry"
-    ]
+    "dependentActions": []
   },
   "deleteclusterschedulerconfig": {
     "name": "DeleteClusterSchedulerConfig",
@@ -3007,14 +2947,14 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "sagemaker:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:ResourceTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "deletemodel": {
@@ -3085,15 +3025,15 @@
       {
         "name": "model-package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentModelLifeCycleStageStatus"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:CurrentModelLifeCycleStageStatus",
-      "sagemaker:CurrentModelLifeCycleStage",
-      "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "deletemodelpackagegroup": {
@@ -3276,15 +3216,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "deleteresourcepolicy": {
-    "name": "DeleteResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants AWS Resource Access Manager permission to delete a resource policy on a SageMaker resource that supports cross-account sharing",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "deletespace": {
     "name": "DeleteSpace",
     "description": "Grants permission to delete a Space",
@@ -3321,7 +3252,7 @@
   "deletetags": {
     "name": "DeleteTags",
     "description": "Grants permission to delete the specified set of tags from an Amazon SageMaker resource",
-    "accessLevel": "Tagging",
+    "accessLevel": "Tagging, Write",
     "resourceTypes": [
       {
         "name": "action",
@@ -3585,9 +3516,9 @@
         "name": "model-package",
         "required": false,
         "conditionKeys": [
-          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
           "sagemaker:CurrentModelLifeCycleStage",
-          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+          "sagemaker:CurrentModelLifeCycleStageStatus"
         ],
         "dependentActions": []
       },
@@ -4011,22 +3942,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describeclusterinference": {
-    "name": "DescribeClusterInference",
-    "isPermissionOnly": true,
-    "description": "Grants permission to get information about the inference operator for a SageMaker HyperPod cluster",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "cluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describeclusternode": {
     "name": "DescribeClusterNode",
     "description": "Grants permission to return information about a SageMaker HyperPod cluster node",
@@ -4522,14 +4437,14 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "sagemaker:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:ResourceTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "describemodel": {
@@ -4615,15 +4530,15 @@
       {
         "name": "model-package",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
+          "sagemaker:CurrentModelLifeCycleStage",
+          "sagemaker:CurrentModelLifeCycleStageStatus"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:CurrentModelLifeCycleStageStatus",
-      "sagemaker:CurrentModelLifeCycleStage",
-      "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "describemodelpackagegroup": {
@@ -4823,22 +4738,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "describesharedmodel": {
-    "name": "DescribeSharedModel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to describe a shared model in a SageMaker Studio application",
-    "accessLevel": "Read",
-    "resourceTypes": [
-      {
-        "name": "shared-model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "describespace": {
     "name": "DescribeSpace",
     "description": "Grants permission to describe a Space",
@@ -5017,11 +4916,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DescribeVolumes",
-      "ec2:DetachVolume",
-      "eks:DescribeCluster"
-    ]
+    "dependentActions": []
   },
   "disablesagemakerservicecatalogportfolio": {
     "name": "DisableSagemakerServicecatalogPortfolio",
@@ -5149,15 +5044,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getresourcepolicy": {
-    "name": "GetResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants AWS Resource Access Manager permission to retrieve a resource policy on a SageMaker resource that supports cross-account sharing",
-    "accessLevel": "Read",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "getsagemakerservicecatalogportfoliostatus": {
     "name": "GetSagemakerServicecatalogPortfolioStatus",
     "description": "Grants permission to get a SageMaker Service Catalog Portfolio",
@@ -5198,9 +5084,7 @@
         "name": "hub",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "sagemaker:AddTags"
-        ]
+        "dependentActions": []
       },
       {
         "name": "hub-content",
@@ -6007,40 +5891,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "listsharedmodelevents": {
-    "name": "ListSharedModelEvents",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list shared model events",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listsharedmodelversions": {
-    "name": "ListSharedModelVersions",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list shared model versions",
-    "accessLevel": "List",
-    "resourceTypes": [
-      {
-        "name": "shared-model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
-  "listsharedmodels": {
-    "name": "ListSharedModels",
-    "isPermissionOnly": true,
-    "description": "Grants permission to list shared models",
-    "accessLevel": "List",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "listspaces": {
     "name": "ListSpaces",
     "description": "Grants permission to list the Spaces in your account",
@@ -6340,9 +6190,9 @@
         "name": "model-package",
         "required": false,
         "conditionKeys": [
-          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
           "sagemaker:CurrentModelLifeCycleStage",
-          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+          "sagemaker:CurrentModelLifeCycleStageStatus"
         ],
         "dependentActions": []
       },
@@ -6596,15 +6446,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "putresourcepolicy": {
-    "name": "PutResourcePolicy",
-    "isPermissionOnly": true,
-    "description": "Grants AWS Resource Access Manager permission to create a resource policy on a SageMaker resource that supports cross-account sharing",
-    "accessLevel": "Write",
-    "resourceTypes": [],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "querylineage": {
     "name": "QueryLineage",
     "description": "Grants permission to explore the lineage graph",
@@ -6637,9 +6478,7 @@
     "accessLevel": "Read",
     "resourceTypes": [],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "retrypipelineexecution": {
     "name": "RetryPipelineExecution",
@@ -6749,22 +6588,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "sendsharedmodelevent": {
-    "name": "SendSharedModelEvent",
-    "isPermissionOnly": true,
-    "description": "Grants permission to send a shared model event",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "shared-model-event",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "startclusterhealthcheck": {
     "name": "StartClusterHealthCheck",
     "description": "Grants permission to start deep health checks for a SageMaker Hyperpod cluster",
@@ -6833,14 +6656,14 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "sagemaker:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:ResourceTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "startmonitoringschedule": {
@@ -7093,14 +6916,14 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "sagemaker:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:ResourceTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "stopmonitoringschedule": {
@@ -7283,20 +7106,7 @@
         "name": "cluster",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "ec2:DescribeImages",
-          "ec2:DescribeSnapshots",
-          "ec2:ModifyImageAttribute",
-          "ec2:ModifySnapshotAttribute",
-          "eks:AssociateAccessPolicy",
-          "eks:CreateAccessEntry",
-          "eks:DeleteAccessEntry",
-          "eks:DescribeAccessEntry",
-          "eks:DescribeCluster",
-          "iam:PassRole",
-          "sagemaker:BatchAddClusterNodes",
-          "sagemaker:BatchDeleteClusterNodes"
-        ]
+        "dependentActions": []
       },
       {
         "name": "reserved-capacity",
@@ -7318,28 +7128,6 @@
     ],
     "dependentActions": []
   },
-  "updateclusterinference": {
-    "name": "UpdateClusterInference",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update the inference operator for a SageMaker HyperPod cluster",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "cluster",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": [
-      "eks:AssociateAccessPolicy",
-      "eks:DescribeCluster",
-      "eks:ListAssociatedAccessPolicies",
-      "iam:PassRole",
-      "sagemaker:DescribeCluster"
-    ]
-  },
   "updateclusterschedulerconfig": {
     "name": "UpdateClusterSchedulerConfig",
     "description": "Grants permission to update a cluster scheduler config",
@@ -7368,13 +7156,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "ec2:DescribeImages",
-      "ec2:DescribeSnapshots",
-      "ec2:ModifyImageAttribute",
-      "ec2:ModifySnapshotAttribute",
-      "eks:DescribeCluster"
-    ]
+    "dependentActions": []
   },
   "updatecoderepository": {
     "name": "UpdateCodeRepository",
@@ -7464,14 +7246,14 @@
       }
     ],
     "conditionKeys": [
-      "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:InstanceTypes",
+      "sagemaker:AppNetworkAccessType",
       "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
-      "sagemaker:AppNetworkAccessType",
-      "sagemaker:VpcSubnets",
-      "sagemaker:StudioLifecycleConfigArns"
+      "sagemaker:InstanceTypes",
+      "sagemaker:StudioLifecycleConfigArns",
+      "sagemaker:VpcSecurityGroupIds",
+      "sagemaker:VpcSubnets"
     ],
     "dependentActions": []
   },
@@ -7626,9 +7408,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "updateimageversion": {
     "name": "UpdateImageVersion",
@@ -7713,14 +7493,14 @@
       {
         "name": "mlflow-tracking-server",
         "required": true,
-        "conditionKeys": [],
+        "conditionKeys": [
+          "aws:ResourceTag/${TagKey}",
+          "sagemaker:ResourceTag/${TagKey}"
+        ],
         "dependentActions": []
       }
     ],
-    "conditionKeys": [
-      "sagemaker:ResourceTag/${TagKey}",
-      "aws:ResourceTag/${TagKey}"
-    ],
+    "conditionKeys": [],
     "dependentActions": []
   },
   "updatemodelcard": {
@@ -7747,17 +7527,17 @@
         "name": "model-package",
         "required": true,
         "conditionKeys": [
-          "sagemaker:CurrentModelLifeCycleStageStatus",
+          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}",
           "sagemaker:CurrentModelLifeCycleStage",
-          "sagemaker:CurrentCustomerMetadataProperties/${MetadataKey}"
+          "sagemaker:CurrentModelLifeCycleStageStatus"
         ],
         "dependentActions": []
       }
     ],
     "conditionKeys": [
-      "sagemaker:ModelApprovalStatus",
       "sagemaker:CustomerMetadataProperties/${MetadataKey}",
       "sagemaker:CustomerMetadataPropertiesToRemove",
+      "sagemaker:ModelApprovalStatus",
       "sagemaker:ModelLifeCycle:Stage",
       "sagemaker:ModelLifeCycle:StageStatus"
     ],
@@ -7793,22 +7573,20 @@
         "name": "monitoring-schedule",
         "required": true,
         "conditionKeys": [],
-        "dependentActions": [
-          "iam:PassRole"
-        ]
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
       "aws:RequestTag/${TagKey}",
       "aws:TagKeys",
       "sagemaker:InstanceTypes",
+      "sagemaker:InterContainerTrafficEncryption",
       "sagemaker:MaxRuntimeInSeconds",
       "sagemaker:NetworkIsolation",
       "sagemaker:OutputKmsKeyArn",
       "sagemaker:VolumeKmsKeyArn",
       "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:VpcSubnets",
-      "sagemaker:InterContainerTrafficEncryption"
+      "sagemaker:VpcSubnets"
     ],
     "dependentActions": []
   },
@@ -7876,9 +7654,7 @@
       }
     ],
     "conditionKeys": [],
-    "dependentActions": [
-      "iam:PassRole"
-    ]
+    "dependentActions": []
   },
   "updatepipelineexecution": {
     "name": "UpdatePipelineExecution",
@@ -7945,22 +7721,6 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "updatesharedmodel": {
-    "name": "UpdateSharedModel",
-    "isPermissionOnly": true,
-    "description": "Grants permission to update a shared model",
-    "accessLevel": "Write",
-    "resourceTypes": [
-      {
-        "name": "shared-model",
-        "required": true,
-        "conditionKeys": [],
-        "dependentActions": []
-      }
-    ],
-    "conditionKeys": [],
-    "dependentActions": []
-  },
   "updatespace": {
     "name": "UpdateSpace",
     "description": "Grants permission to update a Space",
@@ -7974,9 +7734,9 @@
       }
     ],
     "conditionKeys": [
-      "sagemaker:InstanceTypes",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
+      "sagemaker:InstanceTypes",
       "sagemaker:OwnerUserProfileArn",
       "sagemaker:RemoteAccess",
       "sagemaker:SpaceSharingType",
@@ -7997,9 +7757,9 @@
       }
     ],
     "conditionKeys": [
+      "sagemaker:EnableRemoteDebug",
       "sagemaker:InstanceTypes",
-      "sagemaker:KeepAlivePeriod",
-      "sagemaker:EnableRemoteDebug"
+      "sagemaker:KeepAlivePeriod"
     ],
     "dependentActions": []
   },
@@ -8046,13 +7806,13 @@
       }
     ],
     "conditionKeys": [
-      "sagemaker:InstanceTypes",
-      "sagemaker:VpcSecurityGroupIds",
-      "sagemaker:InstanceTypes",
       "sagemaker:DomainSharingOutputKmsKeyArn",
       "sagemaker:ImageArns",
       "sagemaker:ImageVersionArns",
-      "sagemaker:StudioLifecycleConfigArns"
+      "sagemaker:InstanceTypes",
+      "sagemaker:InstanceTypes",
+      "sagemaker:StudioLifecycleConfigArns",
+      "sagemaker:VpcSecurityGroupIds"
     ],
     "dependentActions": []
   },