You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
In module 3 of the workshop in Workshop Studia as test event, when I try to run in SageMaker Studio Classic the titan or llama notebook for creating a model-customization-job, it returns the following error:
AccessDeniedException: An error occurred (AccessDeniedException) when calling the CreateModelCustomizationJob operation: User: arn:aws:sts::****:assumed-role/bedrock-workshop-studio-SageMakerExecutionRole-rVM4toc9ynQ4/SageMaker is not authorized to perform: bedrock:CreateModelCustomizationJob on resource: arn:aws:bedrock:us-west-2:****:model-customization-job/* with an explicit deny in a service control policy
To Reproduce
Run the amazon-bedrock-workshop/03_Model_customization/02_fine-tuning_llama2.ipynb
Expected behavior
No errors
Screenshots
Desktop (please complete the following information):
OS: Win10
Browser: Chrome
Smartphone (please complete the following information):
ND
! Additional context !
Region: us-west-2
The text was updated successfully, but these errors were encountered:
This is still an issue a year later.
The 01_fine-tuning-titan-lite.ipyn lab does not work. An issue was submitted for this last year. Maybe remove this module?
On the SageMakerExecutionRole, there is an explicit deny for CreateModelCustomizationJob. But even if you remove the deny permission from the role, there is still an SCP that will deny this action. So there is no way to create a fine-tuning job if you are an event participant that I can find.
AccessDeniedException: An error occurred (AccessDeniedException) when calling the CreateModelCustomizationJob operation: User: arn:aws:sts::362720299941:assumed-role/bedrock-workshop-studio-v2-SageMakerExecutionRole-8h7CgWyI4zUh/SageMaker is not authorized to perform: bedrock:CreateModelCustomizationJob on resource: arn:aws:bedrock:us-west-2:362720299941:model-customization-job/* with an explicit deny in a service control policy
Sorry for the late response - this is known internally by workshop facilitators - workshop studio team blocks customization and long running jobs. We also think this is a bad idea for AWS hosted workshops, as customers may be waiting for many hours to finish a job. Customers can try this on their own accounts . Closing for now @zdarova and @johngiles12345
Describe the bug
In module 3 of the workshop in Workshop Studia as test event, when I try to run in SageMaker Studio Classic the titan or llama notebook for creating a model-customization-job, it returns the following error:
AccessDeniedException: An error occurred (AccessDeniedException) when calling the CreateModelCustomizationJob operation: User: arn:aws:sts::****:assumed-role/bedrock-workshop-studio-SageMakerExecutionRole-rVM4toc9ynQ4/SageMaker is not authorized to perform: bedrock:CreateModelCustomizationJob on resource: arn:aws:bedrock:us-west-2:****:model-customization-job/* with an explicit deny in a service control policy
To Reproduce
Run the amazon-bedrock-workshop/03_Model_customization/02_fine-tuning_llama2.ipynb
Expected behavior
No errors
Screenshots
Desktop (please complete the following information):
Smartphone (please complete the following information):
ND
! Additional context !
Region: us-west-2
The text was updated successfully, but these errors were encountered: