Configuring Network Passthrough Between ModelArts and SFS Turbo

Creating an Agency to Authorize ModelArts to Use SFS Turbo

1. Log in to the IAM console as the IAM administrator.
2. In the navigation pane on the left, choose Permissions > Policies/Roles.
3. Configure a custom policy for calling SFS Turbo APIs.
   1. Click Create Custom Policy in the upper right corner.
   2. Enter a policy name as required, for example, enter Authorize ModelArts to operate SFS Turbo-1.
   3. Select Visual editor or JSON for Policy View. If you select Visual Editor, go to 3.d. If you select JSON, go to 3.e.
   4. Set the policy content.
      1. Select Allow.
      2. Select Scalable File Service.
      3. Select Actions. Select sfsturbo:shares:showShareNic and sfsturbo:shares:listShareNics under ReadOnly, and select sfsturbo:shares:addShareNic and sfsturbo:shares:deleteShareNic under ReadWrite.
      4. Select All for Resources.
      Figure 1 Creating an agency to authorize ModelArts to use SFS Turbo
      
   5. In the Policy Content area, enter the following content:

      { 
           "Version": "1.1", 
           "Statement": [ 
               { 
                   "Effect": "Allow", 
                   "Action": [ 
                       "sfsturbo:shares:addShareNic", 
                       "sfsturbo:shares:listShareNics", 
                       "sfsturbo:shares:deleteShareNic", 
                       "sfsturbo:shares:showShareNic" 
                   ] 
               } 
           ] 
       }

   6. Click OK.

4. Configure a custom policy for calling VPC APIs.
   1. Click Create Custom Policy in the upper right corner.
   2. Enter a policy name as required, for example, enter Authorize ModelArts to operate SFS Turbo-2.
   3. Select Visual editor or JSON for Policy View. If you select Visual Editor, go to 4.d. If you select JSON, go to 4.e.
   4. Set the policy content.
      1. Select Allow.
      2. Select Virtual Private Cloud.
      3. Select Actions. Select vpc:ports:update under ReadWrite, and select vpc:ports:get under ListOnly.
      4. Select All for Resources.
      Figure 2 Creating an agency to authorize ModelArts to use VPC
      
   5. In the Policy Content area, enter the following content:

      { 
           "Version": "1.1", 
           "Statement": [ 
               { 
                   "Effect": "Allow", 
                   "Action": [ 
                       "vpc:ports:update",  
                       "vpc:ports:get" 
                   ] 
               } 
           ] 
       }

   6. Click OK.

5. On the IAM console, choose Agencies in the left navigation pane and click Create Agency in the upper right corner.
6. On the Create Agency page, enter an agency name, for example, modelarts_agency.
7. Select Cloud service for Agency Type and ModelArts for Cloud Service. Set Validity Period as required and click Next.
8. Select the custom policy created from steps 1 to 4, grant permissions to the agency, and click Next.
9. Select All resources for Scope.
10. Click OK.

Associating the ModelArts Network with SFS Turbo

After associating the ModelArts network with SFS Turbo, you can directly mount the SFS Turbo file system to the notebook development and training environment on ModelArts and access data in the file system.

1. Log in to the ModelArts console, create a network and connect it to the VPC and subnet created in Creating Resources. For details, see ModelArts Network.
2. Locate the resource pool network created in 1, click More, and choose Associate with SFS Turbo.
3. On the displayed page, select the SFS Turbo HPC file system created in Creating Resources.
4. Click OK.

1. Do not disassociate the ModelArts resource pool from the SFS Turbo file system. Or, the ModelArts resource pool cannot access data in the SFS Turbo file system.
2. An SFS Turbo file system can only be associated with one network.