aws / aws/amazon-sagemaker-feedback

SageMaker Studio Pipeline UI shows generic error instead of actual permission error

Open
#230 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
No language data
Stars
10
Forks
3
PR merge metrics
No merged PRs in 30d

Description

### Product Version

- [ ] Amazon SageMaker Studio Classic
- [x] Amazon SageMaker Studio
- [ ] Issue is not related to SageMaker Studio

### Issue Description

# Problem
When a user lacks IAM permission (e.g., `sagemaker:DescribePipelineExecution`), the Pipeline UI shows generic, unhelpful errors:
- "An error occurred when loading pipeline Pipeline-XXXXX"
- "ARN undefined"
- Empty canvas

# Expected Behavior
The UI should display the actual error message returned by the API, such as: "AccessDeniedExeception": User is not authorized to perform sagemaker:DescribePipelineExecution"

# Actual Behaviror
Generic error message that doesn't indicate the root cause. Users have to switch to the Python SDK to discover the real error in the traceback.

# Impact
- Wasted debugging time
- Users may think the UI is broken when it's actually a permission issue
- Poor user experience

# Steps to Reproduce
1. Create an "Amazon SageMaker AI Domain" with a role missing DescribePipelineExecution permission or AmazonSageMakerFullAccess permission.
2. Create and execute a pipeline via the visual editor.
3. A message at the bottom will pop up "Successfully created pipeline execution `View pipeline execution`".
4. Click on this `View pipeline Execution` button. It will show "arn undefined error"
5. Go back to pipelines and click on the pipeline. It will show "an error occurred when loading the pipeline Pipeline-XXXXX"

# Environment
- SageMaker Studio (new version, not Classic)
- Region: us-east-2

I have attached the screenshots of the error messages.

Image
Image

### Expected Behavior

The UI should display the actual error message returned by the API, such as: "AccessDeniedExeception": User is not authorized to perform sagemaker:DescribePipelineExecution"

### Observed Behavior

Generic error message that doesn't indicate the root cause. Users have to switch to the Python SDK to discover the real error in the traceback.

Image

Image

### Product Category

Pipelines

### Feedback Category

User Interface

### Other Details

_No response_

Contributor guide

Open the contributing guide

Research direction

Start by reproducing the failure in Amazon SageMaker Studio in us-east-2 with a role lacking sagemaker:DescribePipelineExecution, then compare the Pipeline UI response with the Python SDK traceback. Done means the UI shows the API's permission error, including the denied action, instead of a generic loading error, undefined ARN, or empty canvas.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, frontend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.