⚠️ Warning: The following steps need to be executed only if you are going to use your own AWS account for the workshop. Please do not execute any action if an AWS account was provided by an AWS instructor.
If you are going to use your own AWS Account, we assume that you have administrator privileges on the account. If this is not the case, please double-check with an AWS instructor before moving to next section.
In this section, we will create the AWS IAM (Identity and Access Management) roles that are required to run this workshop. More specifically, we are going to use AWS CloudFormation to create the following roles:
- AmazonSageMaker-ExecutionRole-endtoendml - The IAM role assumed by the Amazon SageMaker notebook instance.
- GlueServiceRole-endtoendml - The IAM role used by AWS Glue to access Amazon S3 and AWS Glue APIs.
- LambdaInvokeSageMakerEndpointRole-endtoendml - The IAM role assumed by the AWS Lambda function that will invoke the Amazon SageMaker endpoint to get inferences.
Please execute the following steps:
-
Sign into the AWS Management Console at https://console.aws.amazon.com/
-
In the upper-right corner of the AWS Management Console, confirm you are in the desired AWS region. For the instructions of these workshop we will assume using the US East (N. Virginia) [us-east-1], but feel free to change the region at your convenience.
The only constraints for changing AWS region are that we keep consistent the region settings for all services used and services are available in the selected region (please check in case you plan to execute this workshop in another AWS region).
-
Open the AWS CloudFormation console at https://console.aws.amazon.com/cloudformation or choose the CloudFormation service in the menu.
-
In the AWS CloudFormation landing page, press the Create stack button.
-
In the Create stack screen, select Template is ready and Amazon S3 URL as shown below, then copy/paste the following URL in the Amazon S3 URL text box:
https://gianpo-public.s3-eu-west-1.amazonaws.com/endtoendml/create_iam_roles.yamlNote: the URL targets the AWS CloudFormation template which creates the AWS IAM Roles defined above. The template is also available in this GitHub repository for your reference here.
Finally, press the Next button at the bottom of the screen.
-
In the Specify stack details screen, input a stack name like endtoendml-workshop-setup and press Next.
-
Don't specify any additional option in the Configure stack options screen and just press Next.
-
In the final Review endtoendml-workshop-setup screen, please scroll to the bottom, check the checkbox informing that AWS Cloudformation might create IAM resources with custom names and click the Create Stack button.
-
AWS CloudFormation will start creating the AWS resources defined in the template. You can monitor the progress from the Stack detail screen. Wait a few seconds until the screen reports that the stack creation is completed successfully.
-
Once the stack creation is completed, you can start the workshop from Module 01.
