Provides two constructs for training ML models and registering them in SageMaker Model Registry. The SageMakerModelTrainingL3Construct creates a CodeBuild-based CI/CD pipeline that executes training code from a CodeCommit repository and registers trained models in a Model Package Group for versioning. The SageMakerPipelineL3Construct deploys a native SageMaker Pipeline (CfnPipeline) from a pipeline definition JSON, with its own execution role and model storage. Both constructs support cross-account KMS policies for shared model registry access.
Model Package Group - SageMaker Model Registry group for versioning trained model artifacts, enabling approval-based promotion workflows.
S3 Model Bucket - KMS-encrypted bucket for storing training data, model artifacts, and pipeline outputs.
CodeCommit Repository - Source repository seeded with training pipeline code via Code.fromZipFile.
CodePipeline - Orchestrates the training workflow with a source stage from CodeCommit and a build stage via CodeBuild.
CodeBuild Project - Executes the training pipeline code, running SageMaker training jobs and registering model artifacts in the Model Package Group.
Cross-Account KMS Policies - Key policies granting decrypt and describe permissions to external accounts for shared model registry access.
KMS Key and Alias - Customer-managed encryption key for the model bucket and training resources.
IAM Roles - Pipeline execution role and CodeBuild service role with permissions for SageMaker training, S3, ECR, and CloudWatch operations.
SSM Parameters - Published references for the repository name, pipeline name, model package group name, bucket name, and KMS key ID.
CfnPipeline - Native SageMaker Pipeline resource created from a pipeline definition JSON, defining training and processing steps.
Pipeline Execution Role - IAM role assumed by the SageMaker Pipeline to execute training jobs, processing jobs, and register model artifacts.
S3 Model Bucket - KMS-encrypted bucket for storing pipeline outputs and model artifacts.
KMS Key and Alias - Customer-managed encryption key for the model bucket and pipeline resources.
Model Package Group (Optional) - SageMaker Model Registry group for versioning models produced by the pipeline.
Cross-Account KMS Policies - Key policies granting decrypt and describe permissions to external accounts for shared model registry access.
SSM Parameters - Published references for the pipeline name, pipeline ARN, model bucket name, and KMS key ID.