[Issue]failed to find agent identity about sagemaker-ssh-helper HOT 6 CLOSED

Hi, @edfenergy-robcarter , thank you for sharing the logs. Which version of the library do you use? You can check by typing pip freeze | grep sagemaker-ssh-helper .

You're probably using the old version, because some of the issues like #13 has been already fixed.

If you are on the newest version which is v1.11.0, please share which instance type and which SageMaker Studio kernel you're running this on.

from sagemaker-ssh-helper.

Hi Ivan,
This is a first time setup, so we're not attached to any version yet.
Can confirm we're using the latest version 1.11.0 for the first attempt, but error message persists. Should we attempt to connect from local environment anyway? Issue #13 implies that it wouldn't be blocking.

The instance type is ml.t3.medium and the kernel is named as Python 3, (specifically python 3.8.16). We're constrained to python 3.8 for now because of other dependencies.

from sagemaker-ssh-helper.

Hi, @edfenergy-robcarter , thanks for confirming. Which SageMaker Studio image do you use this kernel in? Is it your custom-build image?

SageMaker SSH Helper has been tested and proved to be working in a number of standard kernels and images: https://github.com/aws-samples/sagemaker-ssh-helper/blob/v1.11.0/tests/test_ide.py#L18_L78

I would appreciate if you can try it in one of these images, e.g. PyTorch 1.12 Python 3.8 CPU Optimized, which is also Python 3.8.16, and let me know the results. In case it works for you with the standard pre-built image and doesn't work in your custom image, we might need to look closer into this difference.

from sagemaker-ssh-helper.

Hi, I have tried in the image you recommend, we got this error:

An error occurred (AccessDeniedException) when calling the CreateActivation operation: User: arn:aws:sts::<account_number>:assumed-role/role-cus-data-science-sagemaker-pri/SageMaker is not authorized to perform: ssm:CreateActivation on resource: arn:aws:iam::<account_number>:role/role-cus-data-science-sagemaker-pri because no identity-based policy allows the ssm:CreateActivation action

I am assuming this means we need to change our permissions, I will consult DevOps.

from sagemaker-ssh-helper.

Hi, @edfenergy-robcarter , you are right that you need additional IAM/SSM setup from your admins. This requirement is mentioned in the section Getting started, which refers to the page Setting up your AWS account with IAM and SSM configuration with the necessary configuration.

Let me know if you managed to make it work?

from sagemaker-ssh-helper.

I will close the issue for now.
@edfenergy-robcarter Please, reopen, when you need further support.

from sagemaker-ssh-helper.