{
            "Effect": "Allow",
            "Action": [
                "sagemaker:CreateAppImageConfig",
                "sagemaker:UpdateAppImageConfig",
                "sagemaker:DeleteApp",
                "sagemaker:DeleteAppImageConfig",
                "sagemaker:DescribeApp",
                "sagemaker:DescribeAppImageConfig",
                "sagemaker:DescribeDomain",
                "sagemaker:DescribeUserProfile"
            ],
            "Resource": "arn:aws:sagemaker:*:*:*/*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "sagemaker:CreateApp"
            ],
            "Resource": "arn:aws:sagemaker:*:*:*/*",
            "Condition": {
                "ForAllValues:StringLike": {
                    "sagemaker:ImageArns": [
                        "*image/jupyter-server-3",
                        "*image/sagemaker-data-wrangler-1.0"
                    ]
                }
            }
        },
        {
            "Effect": "Allow",
            "Action": [
                "sagemaker:ListApps",
                "sagemaker:ListAppImageConfigs",
                "sagemaker:ListDomains",
                "sagemaker:ListUserProfiles"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:GetObject",
                "s3:PutObject",
                "s3:DeleteObject",
                "s3:ListBucket"
            ],
            "Resource": [
                "arn:aws:s3:::*"
            ]
        }