翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。 # AmazonSageMakerHyperPodInferenceAccess **説明**: このポリシーは、SageMaker HyperPod 推論演算子の設定に必要な管理者権限を提供します。これにより、推論オペレーターは、HyperPod クラスターに推論ワークロードをデプロイおよび管理するために必要な AWS ネットワークリソース、Amazon S3、Amazon ECR、Amazon CloudWatch、 AWS Certificate Manager、および SageMaker リソースにアクセスできます。 `AmazonSageMakerHyperPodInferenceAccess` は [AWS マネージドポリシー](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies)です。 ## このポリシーを使用すると ユーザー、グループおよびロールに `AmazonSageMakerHyperPodInferenceAccess` をアタッチできます。 ## ポリシーの詳細 + **タイプ**: AWS 管理ポリシー + **作成日時**: 2026 年 1 月 27 日 20:34 UTC + **編集日時:** 2026 年 2 月 12 日 18:01 UTC + **ARN**: `arn:aws:iam::aws:policy/AmazonSageMakerHyperPodInferenceAccess` ## ポリシーのバージョン **ポリシーのバージョン:** v3 (デフォルト) ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを判断します。 ## JSON ポリシードキュメント ``` { "Version" : "2012-10-17", "Statement" : [ { "Sid" : "DeleteObjectsPermission", "Effect" : "Allow", "Action" : [ "s3:DeleteObject" ], "Resource" : [ "arn:aws:s3:::hyperpod-tls*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "S3GetObjectAccess", "Effect" : "Allow", "Action" : [ "s3:GetObject" ], "Resource" : [ "arn:aws:s3:::hyperpod-tls*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "s3:ExistingObjectTag/CreatedBy" : "HyperPodInference" } } }, { "Sid" : "S3PutObjectAccess", "Effect" : "Allow", "Action" : [ "s3:PutObject", "s3:PutObjectTagging" ], "Resource" : [ "arn:aws:s3:::hyperpod-tls*/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "s3:RequestObjectTag/CreatedBy" : "HyperPodInference" } } }, { "Sid" : "ECRAuthorization", "Effect" : "Allow", "Action" : [ "ecr:GetAuthorizationToken" ], "Resource" : "*" }, { "Sid" : "ECRRepositoryAccess", "Effect" : "Allow", "Action" : [ "ecr:GetDownloadUrlForLayer", "ecr:BatchGetImage" ], "Resource" : "arn:aws:ecr:*:*:repository/*" }, { "Sid" : "EC2DescribeAccess", "Effect" : "Allow", "Action" : [ "ec2:DescribeVpcs", "ec2:DescribeInstanceTypes", "ec2:DescribeNetworkInterfaces", "ec2:DescribeSubnets", "ec2:DescribeDhcpOptions", "ec2:DescribeSecurityGroups" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "EC2NetworkInterfaceActions", "Effect" : "Allow", "Action" : [ "ec2:CreateNetworkInterface", "ec2:CreateNetworkInterfacePermission" ], "Resource" : [ "arn:aws:ec2:*:*:network-interface/*", "arn:aws:ec2:*:*:subnet/*", "arn:aws:ec2:*:*:security-group/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "EKSClusterAccess", "Effect" : "Allow", "Action" : [ "eks:DescribeCluster", "eks-auth:AssumeRoleForPodIdentity" ], "Resource" : "arn:aws:eks:*:*:cluster/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "EKSAccessEntryPolicyAssociation", "Effect" : "Allow", "Action" : [ "eks:AssociateAccessPolicy", "eks:DisassociateAccessPolicy" ], "Resource" : "arn:aws:eks:*:*:access-entry/*", "Condition" : { "StringEquals" : { "eks:policyarn" : "arn:aws:eks::aws:cluster-access-policy/AmazonSagemakerHyperpodInferenceMonitoringPolicy" } } }, { "Sid" : "ELBListAndDescribeAccess", "Effect" : "Allow", "Action" : [ "elasticloadbalancing:DescribeLoadBalancers" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "FSxAccess", "Effect" : "Allow", "Action" : [ "fsx:DescribeFileSystems" ], "Resource" : "*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "CertificateImportPermission", "Effect" : "Allow", "Action" : [ "acm:AddTagsToCertificate", "acm:ImportCertificate" ], "Resource" : "arn:aws:acm:*:*:certificate/*", "Condition" : { "ForAllValues:StringEquals" : { "aws:TagKeys" : "CreatedBy" }, "StringEquals" : { "aws:RequestTag/CreatedBy" : "HyperPodInference", "aws:ResourceTag/CreatedBy" : "HyperPodInference", "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "CertificateDeletePermission", "Effect" : "Allow", "Action" : "acm:DeleteCertificate", "Resource" : "arn:aws:acm:*:*:certificate/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "aws:ResourceTag/CreatedBy" : "HyperPodInference" } } }, { "Sid" : "AllowPassRoleToSageMaker", "Effect" : "Allow", "Action" : [ "iam:PassRole" ], "Resource" : "arn:aws:iam::*:role/SageMakerHyperPodInference*", "Condition" : { "StringEquals" : { "iam:PassedToService" : "sagemaker.amazonaws.com" } } }, { "Sid" : "CloudWatchMetricsAccess", "Effect" : "Allow", "Action" : [ "cloudwatch:PutMetricData" ], "Resource" : "*", "Condition" : { "StringEquals" : { "cloudwatch:namespace" : "HyperPodInference" } } }, { "Sid" : "CloudWatchLogsAccess", "Effect" : "Allow", "Action" : [ "logs:PutLogEvents", "logs:CreateLogStream", "logs:CreateLogGroup" ], "Resource" : [ "arn:aws:logs:*:*:log-group:*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SageMakerAccess", "Effect" : "Allow", "Action" : [ "sagemaker:DescribeModel", "sagemaker:DescribeEndpointConfig", "sagemaker:DescribeEndpoint", "sagemaker:DescribeCluster", "sagemaker:DescribeClusterInference", "sagemaker:UpdateClusterInference", "sagemaker:DescribeHubContent" ], "Resource" : [ "arn:aws:sagemaker:*:*:model/*", "arn:aws:sagemaker:*:*:endpoint/*", "arn:aws:sagemaker:*:*:endpointconfig/*", "arn:aws:sagemaker:*:*:cluster/*", "arn:aws:sagemaker:*:*:hub-content/*", "arn:aws:sagemaker:*:*:hub/*" ], "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}" } } }, { "Sid" : "SageMakerCreateAccess", "Effect" : "Allow", "Action" : [ "sagemaker:CreateModel", "sagemaker:CreateEndpointConfig", "sagemaker:CreateEndpoint" ], "Resource" : [ "arn:aws:sagemaker:*:*:model/*", "arn:aws:sagemaker:*:*:endpoint/*", "arn:aws:sagemaker:*:*:endpoint-config/*" ], "Condition" : { "StringEquals" : { "aws:RequestTag/CreatedBy" : "HyperPodInference" } } }, { "Sid" : "SageMakerTagging", "Effect" : "Allow", "Action" : [ "sagemaker:AddTags" ], "Resource" : [ "arn:aws:sagemaker:*:*:model/*", "arn:aws:sagemaker:*:*:endpoint/*", "arn:aws:sagemaker:*:*:endpoint-config/*" ], "Condition" : { "StringEquals" : { "sagemaker:TaggingAction" : [ "CreateModel", "CreateEndpointConfig", "CreateEndpoint" ] } } }, { "Sid" : "SageMakerDeleteAccess", "Effect" : "Allow", "Action" : [ "sagemaker:DeleteModel", "sagemaker:DeleteEndpointConfig", "sagemaker:DeleteEndpoint", "sagemaker:UpdateEndpoint" ], "Resource" : [ "arn:aws:sagemaker:*:*:model/*", "arn:aws:sagemaker:*:*:endpoint/*", "arn:aws:sagemaker:*:*:endpoint-config/*" ], "Condition" : { "StringEquals" : { "aws:ResourceTag/CreatedBy" : "HyperPodInference" } } } ] } ``` ## 詳細情報 + [IAM Identity Center で AWS マネージドポリシーを使用してアクセス許可セットを作成する](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html) + [IAM ID のアクセス許可の追加および削除](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html) + [IAM ポリシーのバージョニングについて理解する](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html) + [AWS 管理ポリシーを開始し、最小特権のアクセス許可に移行する](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)