Cross-account sharing for private model hubs with AWS Resource Access Manager
After creating a private model hub, you can share the hub to the necessary accounts using AWS Resource Access Manager (AWS RAM). For more information on creating a private hub, see Create a private model hub. The following page gives in-depth information about managed permissions related to private hubs within AWS RAM. For information about how to create a resource share within AWS RAM, see Set up cross-account hub sharing.
Managed permissions for curated private hubs
The available access permissions are read, read and use, and full access permissions. The permission name, description, and list of specific APIs available for each permission are listed in the following:
Read permission (
AWSRAMPermissionSageMaker AIHubRead): The read privilege allows resource consumer accounts to read contents in the shared hubs and view details and metadata.DescribeHub: Retrieves details about a hub and its configurationDescribeHubContent: Retrieves details about a model available in a specific hubListHubContent: Lists all models available in a hubListHubContentVersions: Lists the version of all models available in a hub
Read and use permission (
AWSRAMPermissionSageMaker AIHubReadAndUse): The read and use privilege allows resource consumer accounts to read contents in the shared hubs and deploy available models for inference.DescribeHub: Retrieves details about a hub and its configurationDescribeHubContent: Retrieves details about a model available in a specific hubListHubContent: Lists all models available in a hubListHubContentVersions: Lists the version of all models available in a hubDeployHubModel: Allows access to deploy available open-weight hub models for inference
Full access permission (
AWSRAMPermissionSageMaker AIHubFullAccessPolicy): The full access privilege allows resource consumer accounts to read contents in the shared hubs, add and remove hub content, and deploy available models for inference.DescribeHub: Retrieves details about a hub and its configurationDescribeHubContent: Retrieves details about a model available in a specific hubListHubContent: Lists all models available in a hubListHubContentVersions: Lists the version of all models available in a hubImportHubContent: Imports hub contentDeleteHubContent: Deletes hub contentCreateHubContentReference: Creates a hub content reference that shares a model from the SageMaker AI Public models hub to a private hubDeleteHubContentReference: Delete a hub content reference that shares a model from the SageMaker AI Public models hub to a private hubDeployHubModel: Allows access to deploy available open-weight hub models for inference
DeployHubModel permissions are not required for proprietary models.
