# Create connector is failing with 502 and permission error for openai embedding

**URL:** <https://forum.opensearch.org/t/create-connector-is-failing-with-502-and-permission-error-for-openai-embedding/18371>\
**Category:** OpenSearch\
**Tags:** configure\
**Created:** [March 14, 2024, 11:45am UTC](https://forum.opensearch.org/t/create-connector-is-failing-with-502-and-permission-error-for-openai-embedding/18371 "2024-03-14T11:45:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jigar.parekh](https://avatars.discourse-cdn.com/v4/letter/j/43a26b/32.png) [@jigar.parekh](https://forum.opensearch.org/u/jigar.parekh)\
**Post date:** [March 14, 2024, 11:45am UTC](https://forum.opensearch.org/t/create-connector-is-failing-with-502-and-permission-error-for-openai-embedding/18371/1 "2024-03-14T11:45:12Z")

</div>

I am following below blueprint for creating openai embedding connector with opensearch 2.11

> <https://github.com/opensearch-project/ml-commons/blob/2.x/docs/remote_inference_blueprints/openai_connector_embedding_blueprint.md>

when I execute below request it error out with “Request failed to get to the server (status code: 502)”

```auto
POST /_plugins/_ml/connectors/_create
{
  "name": "text-embedding-3-small",
  "description": "text-embedding-3-small",
  "version": "1",
  "protocol": "https",
  "parameters": {
    "model": "text-embedding-3-small",
    "endpoint": "api.openai.com"
  },
  "credential": {
    "openAI_key": "api-key"
  },
  "actions": [
    {
      "action_type": "predict",
      "method": "POST",
      "url": "${parameters.endpoint}/v1/embeddings",
      "headers": {
        "Authorization": "Bearer ${credential.openAI_key}"
      },
      "request_body": "{ \"input\": ${parameters.input}, \"model\": \"${parameters.model}\" }",
      "pre_process_function": "connector.pre_process.openai.embedding",
      "post_process_function": "connector.post_process.openai.embedding"
    }
  ]
}

```

---

<div class="post-metadata">

**Author:** ![jigar.parekh](https://avatars.discourse-cdn.com/v4/letter/j/43a26b/32.png) [@jigar.parekh](https://forum.opensearch.org/u/jigar.parekh)\
**Post date:** [March 14, 2024, 1:04pm UTC](https://forum.opensearch.org/t/create-connector-is-failing-with-502-and-permission-error-for-openai-embedding/18371/2 "2024-03-14T13:04:39Z")

</div>

It seems that in case of AWS Opensearch Service we have to provide role and secretto api-key

Now payload has been changed to

```auto
{
  "name": "text-embedding-3-small",
  "description": "text-embedding-3-small",
  "version": "1",
  "protocol": "https",
  "parameters": {
    "model": "text-embedding-3-small"
  },
  "credential": {
    "secretArn": "arn:aws:secretsmanager:ap-northeast-1:xxxx:secret:openapikey-bRLaNi",
    "roleArn": "arn:aws:iam::xxxx:role/opensearch-secretmanager-role"
  },
  "actions": [
    {
      "action_type": "predict",
      "method": "POST",
      "url": "https://api.openai.com/v1/embeddings",
      "headers": {
        "Authorization": "Bearer ${credential.secretArn.key}"
      },
      "request_body": "{ \"input\": ${parameters.input}, \"model\": \"${parameters.model}\" }",
      "pre_process_function": "connector.pre_process.openai.embedding",
      "post_process_function": "connector.post_process.openai.embedding"
    }
  ]
}

```

But now it is erroring out with

no permissions for [cluster:admin/opensearch/ml/create\_connector] and User [name=arn:aws:iam::xxxx:user/opensearch-user, backend\_roles=, requestedTenant=null]