Security wants a data-scientist persona that can train and a second persona that can only deploy, without hand-writing every action from scratch. What should they use?
Select an answer to reveal the explanation.
Short Explanation
Security wants a train persona and a deploy-only persona. Use SageMaker Role Manager to build those least-privilege roles. A shared AdministratorAccess role or a blanket s3:* policy is not that helper.
Full Explanation
SageMaker Role Manager builds persona-based IAM roles (train versus deploy) with least privilege instead of a hand-written action list. A shared AdministratorAccess role, Lex, or a blanket s3:* inline policy is not that helper.