adding output for sagemaker role + s3 assume role

_output.tf

@@ -0,0 +1,11 @@
+output "sagemaker_role_arn" {
+  value = aws_iam_role.execution_role.arn
+}
+
+output "sagemaker_role_name" {
+  value = aws_iam_role.execution_role.id
+}
+
+output "sagemaker_security_group" {
+  value = aws_security_group.sagemakerstudio.id
+}

sagemaker_domain.tf

@@ -30,6 +30,11 @@ data "aws_iam_policy_document" "execution_role_policy" {
       type        = "Service"
       identifiers = ["sagemaker.amazonaws.com"]
     }
+
+    principals {
+      type        = "Service"
+      identifiers = ["s3.amazonaws.com"]
+    }
   }
 }