Explanation:
To use AWS Glue interactive sessions from within Amazon SageMaker Studio, the execution role needs a trust policy that allows both the AWS Glue (glue.amazonaws.com) and SageMaker (sagemaker.amazonaws.com) service principals to assume the role. This allows SageMaker Studio to seamlessly authenticate and run the interactive Glue sessions.
Ultimate access to all questions.
Question 43 A data engineer is configuring Amazon SageMaker Studio to use AWS Glue interactive sessions to prepare data for machine learning (ML) models. The data engineer receives an access denied error when the data engineer tries to prepare the data by using SageMaker Studio. Which change should the engineer make to gain access to SageMaker Studio?
A
Add the AWSSGlueServiceRole managed policy to the data engineer's IAM user.
B
Add a policy to the data engineer's IAM user that includes the sts:AssumeRole action for the AWS Glue and SageMaker service principals in the trust policy.
C
Add the AmazonSageMakerFullAccess managed policy to the data engineer's IAM user.
D
Add a policy to the data engineer's IAM user that allows the sts:AddAssociation action for the AWS Glue and SageMaker service principals in the trust policy.
No comments yet.