From 3df1ab79b5f52c225872e0614a66dce78d9615d2 Mon Sep 17 00:00:00 2001
From: "opensearch-trigger-bot[bot]"
 <98922864+opensearch-trigger-bot[bot]@users.noreply.github.com>
Date: Thu, 18 Jul 2024 02:52:26 -0700
Subject: [PATCH] update tutorials for caching secrets for non-aws models
 (#2637) (#2673)

Signed-off-by: Xun Zhang <xunzh@amazon.com>
(cherry picked from commit 2058d76f6e402f283c38c73cbf74ab2d68c2943f)

Co-authored-by: Xun Zhang <xunzh@amazon.com>
---
 docs/tutorials/aws/AIConnectorHelper.ipynb                     | 1 +
 .../aws/semantic_search_with_cohere_embedding_model.md         | 3 ++-
 .../aws/semantic_search_with_openai_embedding_model.md         | 3 ++-
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/docs/tutorials/aws/AIConnectorHelper.ipynb b/docs/tutorials/aws/AIConnectorHelper.ipynb
index b34a294a5b..ff2a1f2b4a 100644
--- a/docs/tutorials/aws/AIConnectorHelper.ipynb
+++ b/docs/tutorials/aws/AIConnectorHelper.ipynb
@@ -375,6 +375,7 @@
     "                {\n",
     "                    \"Action\": [\n",
     "                        \"secretsmanager:GetSecretValue\"\n",
+    "                        \"secretsmanager:DescribeSecret\"\n",
     "                    ],\n",
     "                    \"Effect\": \"Allow\",\n",
     "                    \"Resource\": secret_arn\n",
diff --git a/docs/tutorials/aws/semantic_search_with_cohere_embedding_model.md b/docs/tutorials/aws/semantic_search_with_cohere_embedding_model.md
index 2982d6aabd..8d26c918b2 100644
--- a/docs/tutorials/aws/semantic_search_with_cohere_embedding_model.md
+++ b/docs/tutorials/aws/semantic_search_with_cohere_embedding_model.md
@@ -61,7 +61,8 @@ Go to IAM console, create IAM role `my_cohere_secret_role` with:
     "Statement": [
         {
             "Action": [
-                "secretsmanager:GetSecretValue"
+                "secretsmanager:GetSecretValue",
+                "secretsmanager:DescribeSecret"
             ],
             "Effect": "Allow",
             "Resource": "your_secret_arn_created_in_step1"
diff --git a/docs/tutorials/aws/semantic_search_with_openai_embedding_model.md b/docs/tutorials/aws/semantic_search_with_openai_embedding_model.md
index ab1236cbe3..b3103b3b58 100644
--- a/docs/tutorials/aws/semantic_search_with_openai_embedding_model.md
+++ b/docs/tutorials/aws/semantic_search_with_openai_embedding_model.md
@@ -54,7 +54,8 @@ Go to IAM console, create IAM role `my_openai_secret_role` with:
     "Statement": [
         {
             "Action": [
-                "secretsmanager:GetSecretValue"
+                "secretsmanager:GetSecretValue",
+                "secretsmanager:DescribeSecret"
             ],
             "Effect": "Allow",
             "Resource": "your_secret_arn_created_in_step1"