update tutorials for caching secrets for non-aws models (opensearch-project#2637)

Zhangxunmt · web-flow · commit 2058d76f6e40 · 2024-07-16T15:32:22.000-07:00
Signed-off-by: Xun Zhang &lt;xunzh@amazon.com&gt;
diff --git a/docs/tutorials/aws/AIConnectorHelper.ipynb b/docs/tutorials/aws/AIConnectorHelper.ipynb
@@ -375,6 +375,7 @@
     "                {\n",
     "                    \"Action\": [\n",
     "                        \"secretsmanager:GetSecretValue\"\n",
+    "                        \"secretsmanager:DescribeSecret\"\n",
     "                    ],\n",
     "                    \"Effect\": \"Allow\",\n",
     "                    \"Resource\": secret_arn\n",
diff --git a/docs/tutorials/aws/semantic_search_with_cohere_embedding_model.md b/docs/tutorials/aws/semantic_search_with_cohere_embedding_model.md
@@ -61,7 +61,8 @@ Go to IAM console, create IAM role `my_cohere_secret_role` with:
     "Statement": [
         {
             "Action": [
-                "secretsmanager:GetSecretValue"
+                "secretsmanager:GetSecretValue",
+                "secretsmanager:DescribeSecret"
             ],
             "Effect": "Allow",
             "Resource": "your_secret_arn_created_in_step1"
diff --git a/docs/tutorials/aws/semantic_search_with_openai_embedding_model.md b/docs/tutorials/aws/semantic_search_with_openai_embedding_model.md
@@ -54,7 +54,8 @@ Go to IAM console, create IAM role `my_openai_secret_role` with:
     "Statement": [
         {
             "Action": [
-                "secretsmanager:GetSecretValue"
+                "secretsmanager:GetSecretValue",
+                "secretsmanager:DescribeSecret"
             ],
             "Effect": "Allow",
             "Resource": "your_secret_arn_created_in_step1"
