This topic describes the authorization rules of OpenSearch LLM-Based Conversational Search Edition.
Authorization rules for management operations
Operation | RAM Action | Resource | Description |
CreateAppGroup | opensearch:CreateAppGroup | app-groups/* | Creates an application. |
RenewAppGroup | opensearch:UpdateApp | apps/{appGroupName} | Renews an application. |
DescribeAppGroup | opensearch:DescribeAppGroup | app-groups/{appGroupName} | Queries the details of an application. |
ModifyAppGroup | opensearch:ModifyAppGroup | app-groups/{appGroupName} | Modifies the application quota. |
ListAppGroups | opensearch:ListAppGroup | app-groups/* | Queries a list of applications. |
DescribeApps | opensearch:ListApp | app-groups/{appGroupName} | Queries a list of instance versions. |
CreateApp | opensearch:CreateApp | app-groups/{appGroupName} | Modifies the configurations of an application. |
CreateAppGroupCredentials | opensearch:WriteCredentials | apps/{appGroupName} | Creates an access credential. |
DeleteAppGroupCredentials | opensearch:WriteCredentials | apps/{appGroupName} | Deletes an access credential. |
UpdateCredentials | opensearch:WriteCredentials | apps/{appGroupName} | Modifies an access credential. |
ListProceedings | opensearch:ListProceedings | app-groups/{appGroupName} | Queries the current processing flow. |
ListFunctionInstances | opensearch:DescribeFunction | apps/{appGroupName} | Queries a list of instance models. |
ListAppGroupCredentials | opensearch:DescribeCredentials | apps/{appGroupName} | Queries a list of access credentials. |
ListAppPrompts | opensearch:DescribePrompt | apps/{appGroupName} | Queries a list of prompts. |
RemovePrompt | opensearch:WritePrompt | apps/{appGroupName} | Deletes a prompt. |
GetPrompt | opensearch:DescribePrompt | apps/{appGroupName} | Queries the details of a prompt. |
CreatePrompt | opensearch:WritePrompt | apps/{appGroupName} | Creates a prompt. |
UpdatePrompt | opensearch:WritePrompt | apps/{appGroupName} | Updates a prompt. |
ListEcosystemRobots | opensearch:ListEcosystemRobots | robots/* | Queries a list of chatbots. |
GetEcosystemRobot | opensearch:GetEcosystemRobot | robots/{id} | Queries the information about a chatbot. |
UpdateEcosystemRobot | opensearch:DeleteEcosystemRobot | robots/{id} | Updates a chatbot. |
CreateEcosystemRobot | opensearch:CreateEcosystemRobot | robots/* | Creates a chatbot. |
DeleteEcosystemRobot | opensearch:DeleteEcosystemRobot | robots/{id} | Deletes a chatbot. |
GenerateEcosystemOutgoingUrls | opensearch:GenerateEcosystemOutgoingUrls | * | Queries the request URLs. |
ListEcosystemOptionPacks | opensearch:ListEcosystemOptionPacks | option-packs/* | Queries a list of query configurations of chatbots. |
UpdateEcosystemOptionPack | opensearch:UpdateEcosystemOptionPack | option-packs/{id} | Updates the query configurations of chatbots. |
DeleteEcosystemOptionPack | opensearch:DeleteEcosystemOptionPack | option-packs/{id} | Deletes the query configurations of chatbots. |
CreateEcosystemOptionPack | opensearch:CreateEcosystemOptionPack | option-packs/* | Creates query configurations of chatbots. |
CreateEvaluatorDataset | opensearch:WriteEvaluator | apps/{appGroupName} | Creates an evaluation dataset. |
GetEvaluatorDataset | opensearch:DescribeEvaluator | apps/{appGroupName} | Queries an evaluation dataset. |
GetEvaluatorDatasets | opensearch:DescribeEvaluator | apps/{appGroupName} | Queries evaluation datasets. |
DeleteEvaluatorDataset | opensearch:WriteEvaluator | apps/{appGroupName} | Deletes an evaluation dataset. |
GetEvaluatorTask | opensearch:DescribeEvaluator | apps/{appGroupName} | Queries the configurations of an evaluation task. |
GetEvaluatorTasks | opensearch:DescribeEvaluator | apps/{appGroupName} | Queries a list of evaluation tasks. |
GetEvaluatorTaskDetail | opensearch:DescribeEvaluator | apps/{appGroupName} | Queries the dataset and results of an evaluation task. |
DeleteEvaluatorTask | opensearch:WriteEvaluator | apps/{appGroupName} | Deletes an evaluation task. |
DiffEvaluatorTaskResult | opensearch:WriteEvaluator | apps/{appGroupName} | Compares evaluation results. |
PutEvaluatorTaskResult | opensearch:WriteEvaluator | apps/{appGroupName} | Manually modifies evaluation results. |
SubmitEvaluatorTask | opensearch:WriteEvaluator | apps/{appGroupName} | Submits and starts an evaluation task. |
CreateSpider | opensearch:WriteChatos | apps/{appGroupName} | Creates a website import task. |
DeleteSpider | opensearch:WriteChatos | apps/{appGroupName} | Deletes a website import task. |
ListSpider | opensearch:DescribeChatos | apps/{appGroupName} | Queries a list of website import tasks. |
StartSpider | opensearch:WriteChatos | apps/{appGroupName} | Starts a website import task. |
StopSpider | opensearch:WriteChatos | apps/{appGroupName} | Stops a website import task. |
Authorization rules for traffic operations
Operation | RAM Action | Resource | Description |
PushKnowledgeDocuments | opensearch:PushKnowledgeDocuments | apps/{appGroupName} | Pushes multiple documents at a time. |
SearchKnowledge | opensearch:SearchKnowledge | apps/{appGroupName} | Performs a Q&A document query. |
SplitKnowledgeDocuments | opensearch:SplitKnowledgeDocuments | apps/{appGroupName} | Performs text segmentation and vectorization. |
ListOpenKnowledgeEntries | opensearch:ListOpenKnowledgeEntries | apps/{appGroupName} | Queries a list of Q&A entries from the knowledge base. |
CreateKnowledgeEntry | opensearch:CreateKnowledgeEntry | apps/{appGroupName} | Creates a Q&A entry in the knowledge base. |
GetKnowledgeEntry | opensearch:GetKnowledgeEntry | apps/{appGroupName} | Queries the details of a Q&A entry from the knowledge base. |
UpdateKnowledgeEntry | opensearch:UpdateKnowledgeEntry | apps/{appGroupName} | Updates a Q&A entry in the knowledge base. |
DeleteKnowledgeEntry | opensearch:DeleteKnowledgeEntry | apps/{appGroupName} | Deletes a Q&A entry from the knowledge base. |
GetKnowledgeDocument | opensearch:GetKnowledgeDocument | apps/{appGroupName} | Queries data. |
ListKnowledgeDocuments | opensearch:ListKnowledgeDocuments | apps/{appGroupName} | Queries documents. |
UseLLM | opensearch:UseLLM | apps/{appGroupName} | Performs a large language model (LLM)-based conversational search. |
AddKnowledgeDocumentByOss | opensearch:AddKnowledgeDocumentByOss | apps/{appGroupName} | Uploads a document. |
SaveKnowledgeDocumentByFile | opensearch:SaveKnowledgeDocumentByFile | apps/{appGroupName} | Uploads a document. |
GetKnowledgeStatistics | opensearch:GetKnowledgeStatistics | apps/{appGroupName} | Queries the number of documents. |
GenerateKnowledgeDocumentSummary | opensearch:GenerateKnowledgeDocumentSummary | apps/{appGroupName} | Generates the summary of a document. |
SearchTable | opensearch:SearchTable | apps/{appGroupName} | Performs a table-based search. |
SearchMultiplexKnowledge | opensearch:SearchMultiplexKnowledge | apps/{appGroupName} | Performs a table-based conversational search or a text-based conversational search. |
PushTables | opensearch:PushTables | apps/{appGroupName} | Uploads a table. |
GenerateKnowledgeDocumentEmbedding | opensearch:GenerateKnowledgeDocumentEmbedding | apps/{appGroupName} | Performs text vectorization. |
GenerateEmbedding | opensearch:GenerateEmbedding | apps/{appGroupName} | Performs vectorization on input text. |