aws-sagemaker-pass-role-update-mlflow-config
iam:PassRole to sagemaker.amazonaws.com for MLflow tracking server role updates.
match (effective permission)
{
"action": "iam:PassRole",
"resource_type": "AWS::IAM::Role"
}
where
principal has sagemaker:UpdateMlflowTrackingServer
iam:PassedToService condition (if present) includes sagemaker.amazonaws.com
target role trust policy allows sagemaker.amazonaws.com
emit
| source type | Identity |
|---|---|
| target type | MachineIdentity |
| source | <principal> |
| target | <IAM Role passable to sagemaker.amazonaws.com> |
| permissions | iam:PassRole sagemaker:UpdateMlflowTrackingServer |
| conditions | iam_permission condition_expression role_compatibility |
Narrative
{principal.name} can update the MLflow tracking server's execution role (iam:PassRole + sagemaker:UpdateMlflowTrackingServer), redirecting the server's operations to use a different (possibly more privileged) role.
Raw rule rules/explicit/aws/sagemaker.yaml
id: aws-sagemaker-pass-role-update-mlflow-config
emits: CanPassIdentity
description: iam:PassRole to sagemaker.amazonaws.com for MLflow tracking server role updates.
match_effective_permission:
action: iam:PassRole
resource_type: AWS::IAM::Role
where:
- principal has sagemaker:UpdateMlflowTrackingServer
- iam:PassedToService condition (if present) includes sagemaker.amazonaws.com
- target role trust policy allows sagemaker.amazonaws.com
emit:
source_type: Identity
target_type: MachineIdentity
source: <principal>
target: <IAM Role passable to sagemaker.amazonaws.com>
permissions:
- iam:PassRole
- sagemaker:UpdateMlflowTrackingServer
conditions:
- iam_permission
- condition_expression
- role_compatibility
false_positive_note: Updating the MLflow tracking server's RoleArn with PassRole is a configuration-identity
swap (CanPassIdentity + CanModifyConfiguration). The linchpin can-execute-as.yaml will produce CanExecuteAs
via execute-as-via-config-identity-swap.
narrative: '{principal.name} can update the MLflow tracking server''s execution role (iam:PassRole +
sagemaker:UpdateMlflowTrackingServer), redirecting the server''s operations to use a different (possibly
more privileged) role.'