Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Doc] Add more thorough explanation os using AWS OpenSearch Service when Fine-grained access control is not enabled #3555

Open
brianf-aws opened this issue Feb 14, 2025 · 1 comment

Comments

@brianf-aws
Copy link
Contributor

brianf-aws commented Feb 14, 2025

What is needed?

There seems to a gap in our tutorials that involve working with AWS OpenSearch service where a user needs to enable fine grained access control in the managed service so that they can perform actions and be able to follow a tutorial.

What can be done?

We can do two actions. The third one is a managed service task that may take some time to publish

  1. Add a separate markdown file that can be used as a comprehensive guide on how a user can enable fine-grained access control.
  2. Update the documentation website to include this information
  3. Reach out to AWS team to update their website using ml-commons

Any References?

@rikkarth
Copy link

rikkarth commented Feb 17, 2025

Specifically in this section was where we spent most of our time figuring out why we couldn't see this panel in AWS OpenSearch Service

Image

It appears that when fine-grained access control is not enabled, this panel does not appear in the Dashboard. This option was disabled by default I believe because after you enable fine-grained access control you can't disable it.

Image

This relationship between security dashboard and fine-grained access control is not really explicit anywhere, we went through a lot of AWS and OpenSearch documentation.

You can find more about fine-grained access control here: https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html

The markdown tutorial is very well written and we followed all the steps successfully, so I believe adding this extra information to the tutorial and making it more visible for others will surely prove to be a valuable resource for people getting into ml-commons through AWS OpenSearch Service.

Thank you for capturing this issue in this ticket.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants