aws-samples / aws-samples/bedrock-chat

[BUG] OpenSearch dashboards is not accesible for console user

Open
#665 1 comment 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
TypeScript
Stars
1.3k
Forks
535
Avg merge
1d 12h
Merged PRs (30d)
10

Description

## 🚨 **Please Note** 🚨

To ensure efficient investigation of the issue, please fill out the fields below with as much detail as possible. **Reports that do not follow this template may be closed without notification.** We appreciate your cooperation.

## Describe the bug

With Bedrock Knowledge Bases on custom bot, users can't access OpenSearch dashboard although user has AdministratorAccess.

There are no data access control granted to IAM Roles or Users used by human. It might be a good idea to be able to configurable the OpenSearch dashboard administrator role or user in cdk.json.

## To Reproduce

Steps to reproduce the behavior:

1. Create custom bot with knowledges
2. Go to OpneSearch Serverless collection page on AWS Management Console
3. Click on 'dashboard' link
5. See error

## Screenshots

![image](https://github.com/user-attachments/assets/a2d5bb51-0329-463c-863a-5ae3d407b2e7)

## Additional context

Add any other context about the problem here.

Contributor guide

Open the contributing guide

Research direction

Review the Bedrock Knowledge Bases and OpenSearch Serverless setup, starting with the cdk.json configuration mentioned in the report. Reproduce the dashboard access failure after creating a custom bot with knowledge, then trace the IAM roles or users used by human operators. Done means console users can access the OpenSearch dashboard with the intended administrator configuration.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
28/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.