chmod: changing permissions - Operation not permitted

[jackexu]

Got error message chmod: changing permissions of ‘/home/ec2-user/SageMaker/efs’: Operation not permitted when executing below

amazon-sagemaker-notebook-instance-lifecycle-config-samples/scripts/mount-efs-file-system/on-start.sh

Line 27 in 77ffb12

chmod go+rw /home/ec2-user/SageMaker/efs

Enabled root access in SageMaker Notebook instance and the file system policy below - if delete the file system policy then it's working

{
    "Version": "2012-10-17",
    "Id": "efs-policy-wizard-a5793782-0072-4e26-978c-c838d8e1cf95",
    "Statement": [
        {
            "Sid": "efs-statement-3838fba9-018f-431e-b655-b25e817fb97c",
            "Effect": "Allow",
            "Principal": {
                "AWS": "*"
            },
            "Action": [
                "elasticfilesystem:ClientWrite",
                "elasticfilesystem:ClientMount"
            ],
            "Condition": {
                "Bool": {
                    "elasticfilesystem:AccessedViaMountTarget": "true"
                }
            }
        }
    ]
}

[jackexu]

NVM - Found a fix: need to give ClientRootAccess to SageMaker Notebook Role

{
    "Version": "2012-10-17",
    "Id": "efs-policy-wizard-xxx",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::<account_id>:root"
            },
            "Action": [
                "elasticfilesystem:ClientWrite",
                "elasticfilesystem:ClientMount"
            ],
            "Resource": "<efs_arn>",
            "Condition": {
                "Bool": {
                    "elasticfilesystem:AccessedViaMountTarget": "true"
                }
            }
        },
        {
            "Effect": "Allow",
            "Principal": {
                "AWS": "<sagemaker_role_arn>"
            },
            "Action": [
                "elasticfilesystem:ClientRootAccess",
                "elasticfilesystem:ClientWrite",
                "elasticfilesystem:ClientMount"
            ],
            "Resource": "<efs_arn>"
        }
    ]
}