hpo_bring_your_own_keras_container.ipynb

Throws the following error unless an extra permission is added outside of the instance:

"User: arn:aws:sts::980970363349:assumed-role/AmazonSageMaker-ExecutionRole-20200806T154123/SageMaker is not authorized to perform: ecr:InitiateLayerUpload on resource: arn:aws:ecr:us-west-2:980970363349:repository/test"

Is it possible to add this permission from within the instance?

Open hpo_bring_your_own_keras_container.ipynb and trace how the SageMaker execution role and ECR repository are configured around the failing operation. Confirm whether the notebook can grant the missing ecr:InitiateLayerUpload permission from the instance; done means documenting the supported permission path or the required external role change.

Written by the indexing model from the issue text.