[go: nahoru, domu]

Skip to content

Commit

Permalink
added tars
Browse files Browse the repository at this point in the history
  • Loading branch information
cfregly committed Feb 13, 2022
1 parent fd11552 commit d14a4e6
Show file tree
Hide file tree
Showing 5 changed files with 223 additions and 0 deletions.
1 change: 1 addition & 0 deletions 12_security/studio-vpc-firewall/cfn_templates/.gitignore
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
annotations_trainval2017.zip
Binary file not shown.
112 changes: 112 additions & 0 deletions 12_security/studio-vpc-firewall/cfn_templates/lab-gpu.policy
Original file line number Diff line number Diff line change
@@ -0,0 +1,112 @@
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "SageMakerFullAccess",
"Effect": "Allow",
"Action": [
"sagemaker:*"
],
"Resource": "*",
"Condition": {
"ForAllValues:StringLike": {
"sagemaker:InstanceTypes": [
"ml.t3.medium",
"ml.m5.large",
"ml.m5.xlarge",
"ml.m5.2xlarge",
"ml.m5.4xlarge",
"ml.c5.large",
"ml.c5.xlarge",
"ml.c5.2xlarge",
"ml.c5.9xlarge",
"ml.g4dn.xlarge",
"ml.p3.2xlarge"
]
}
}
},
{
"Sid": "S3",
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": "*"
},
{
"Sid": "ServiceCatalog",
"Effect": "Allow",
"Action": [
"servicecatalog:*"
],
"Resource": "*"
},
{
"Sid": "IAM",
"Effect": "Allow",
"Action": [
"iam:GetRole",
"iam:GetRolePolicy"
],
"Resource": "*"
},
{
"Sid": "Glue",
"Effect": "Allow",
"Action": [
"glue:*"
],
"Resource": "*"
},
{
"Sid": "Athena",
"Effect": "Allow",
"Action": [
"athena:*"
],
"Resource": "*"
},
{
"Sid": "CloudWatch",
"Effect": "Allow",
"Action": [
"logs:*",
"cloudwatch:*"
],
"Resource": "*"
},
{
"Sid": "ECR",
"Effect": "Allow",
"Action": [
"ecr:*"
],
"Resource": "*"
},
{
"Sid": "EKS",
"Effect": "Deny",
"Action": [
"eks:*"
],
"Resource": "*"
},
{
"Sid": "ECS",
"Effect": "Deny",
"Action": [
"ecs:*"
],
"Resource": "*"
},
{
"Sid": "EC2",
"Effect": "Deny",
"Action": [
"ec2:*"
],
"Resource": "*"
}
]
}
110 changes: 110 additions & 0 deletions 12_security/studio-vpc-firewall/cfn_templates/lab.policy
Original file line number Diff line number Diff line change
@@ -0,0 +1,110 @@
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "SageMakerFullAccess",
"Effect": "Allow",
"Action": [
"sagemaker:*"
],
"Resource": "*",
"Condition": {
"ForAllValues:StringLike": {
"sagemaker:InstanceTypes": [
"ml.t3.medium",
"ml.m5.large",
"ml.m5.xlarge",
"ml.m5.2xlarge",
"ml.m5.4xlarge",
"ml.c5.large",
"ml.c5.xlarge",
"ml.c5.2xlarge",
"ml.c5.9xlarge"
]
}
}
},
{
"Sid": "S3",
"Effect": "Allow",
"Action": [
"s3:*"
],
"Resource": "*"
},
{
"Sid": "ServiceCatalog",
"Effect": "Allow",
"Action": [
"servicecatalog:*"
],
"Resource": "*"
},
{
"Sid": "IAM",
"Effect": "Allow",
"Action": [
"iam:GetRole",
"iam:GetRolePolicy"
],
"Resource": "*"
},
{
"Sid": "Glue",
"Effect": "Allow",
"Action": [
"glue:*"
],
"Resource": "*"
},
{
"Sid": "Athena",
"Effect": "Allow",
"Action": [
"athena:*"
],
"Resource": "*"
},
{
"Sid": "CloudWatch",
"Effect": "Allow",
"Action": [
"logs:*",
"cloudwatch:*"
],
"Resource": "*"
},
{
"Sid": "ECR",
"Effect": "Allow",
"Action": [
"ecr:*"
],
"Resource": "*"
},
{
"Sid": "EKS",
"Effect": "Deny",
"Action": [
"eks:*"
],
"Resource": "*"
},
{
"Sid": "ECS",
"Effect": "Deny",
"Action": [
"ecs:*"
],
"Resource": "*"
},
{
"Sid": "EC2",
"Effect": "Deny",
"Action": [
"ec2:*"
],
"Resource": "*"
}
]
}
Binary file not shown.

0 comments on commit d14a4e6

Please sign in to comment.