add tag exclusion for PreventDirectInternetAccessSageMakerNotebook

ach-mk · ach-mk · commit 395651a59212 · 2025-03-10T18:13:55.000+01:00
diff --git a/service_control_policies/data_perimeter_governance_policy_2.json b/service_control_policies/data_perimeter_governance_policy_2.json
@@ -124,6 +124,9 @@
         "Condition": {
             "StringEquals": {
                "sagemaker:DirectInternetAccess": "Enabled"
+            },
+            "StringNotEqualsIfExists": {
+               "aws:PrincipalTag/dp:exclude": "true"
             }
          }
       },

Original file line number	Diff line number	Diff line change
`@@ -124,6 +124,9 @@`
`124`	`124`	`"Condition": {`
`125`	`125`	`"StringEquals": {`
`126`	`126`	`"sagemaker:DirectInternetAccess": "Enabled"`
	`127`	`+ },`
	`128`	`+ "StringNotEqualsIfExists": {`
	`129`	`+ "aws:PrincipalTag/dp:exclude": "true"`
`127`	`130`	`}`
`128`	`131`	`}`
`129`	`132`	`},`