About Amazon Mechanical Turk 4/5

About Amazon Mechanical Turk 4/5


Setting Up Accounts and Tools

Step 1: Sign Up for an AWS Account

To develop solutions using the Amazon Mechanical Turk web service, you must first sign up for an AWS account. An AWS account is an Amazon.com account that enables you to use services from AWS.

To sign up for an AWS account

  1. Open https://aws.amazon.com/, and then choose Create an AWS Account.
  2. Follow the online instructions.

    Part of the sign-up procedure involves receiving a phone call and entering a PIN using the phone keypad.

Using your AWS account, you can view your AWS account activity and usage reports and manage your security credentials.

AWS Security Credentials

AWS uses access keys to help protect your data when you access AWS programmatically. An access key consists of two parts: an access key ID, which is similar to a user name, and a secret access key, which is similar to a password.

  • Sample access key ID: AKIAIOSFODNN7EXAMPLE
  • Sample secret access key: wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

You use access keys to sign programmatic requests that you make to the Amazon Mechanical Turk API using a supported AWS SDK. You can use these access keys in both the sandbox and the production environment.

Note: Although you may use your AWS root credentials to access the Mechanical Turk API, we recommend that instead you create an IAM user and use those credentials instead. Please note that Mechanical Turk does not currently support the use of IAM role credentials.

To manage your AWS security credentials

  1. Sign in to the Amazon Web Services website at http://aws.amazon.com/security-credentials.
  2. Do one of the following:
    • If you signed in using your root credentials, choose Continue to Security Credentials.
    • If you signed in as an IAM user, choose Access Keys (Access Key ID and Secret Access Key).
  3. Choose Create New Access Key.
  4. In Create Access Key, choose Download Key File.
  5. The private key file (rootkey.csv) is automatically downloaded by your browser. Save the private key file in a safe place.

    Important: This is the only chance for you to save the private key file. You will need these credentials to use the Amazon Mechanical Turk API.

Step 2: Create a Requester Account

Before you can use Amazon Mechanical Turk, you must have an Amazon Mechanical Turk Requester account.

To create and register a Requester account

  1. Go to https://requester.mturk.com.
  2. Click Create an Account.
  3. Enter your email address.
  4. Follow the prompts to complete your Requester account registration.

    When prompted, type your mailing address and accept the Amazon Mechanical Turk Participation Agreement.

Step 3: Link Your AWS account to your MTurk Requester account

Next, you will need to link your AWS Account to your MTurk Requester Account. This operation grants permission to your AWS Account to access your Requester account using the MTurk APIs.

  1. Go to https://requester.mturk.com/developer.
  2. Click Link your AWS Account and sign-in with your AWS Root user email address and password.

Step 4: Create an IAM User

With AWS Identity and Access Management (IAM) you can securely control access to AWS services and resources for your users. Creating an IAM user allows you to use these credentials to access the Amazon Mechanical Turk API instead of using your root account credentials. Please note that Mechanical Turk does not currently support the use of IAM role credentials.

Note: You use IAM credentials only to authenticate Mechanical Turk API requests. You cannot use them to log in to the Mechanical Turk Requester website.

To create an IAM user

  1. Sign in to the Amazon Web Services website at http://aws.amazon.com/security-credentials.
  2. Choose Get Started With IAM Users.
  3. Choose Create New Users.
  4. Under Enter User Names, type names for each of your users.
  5. Make sure Generate an access key for each user is selected and choose Create.
  6. Choose Show User Security Credentials.
  7. Choose Download Credentials.
  8. Your browser automatically downloads the private key file (credentials.csv). Save the private key file in a safe place.

    Important: This is the only chance for you to save the private key file. You will need these credentials to use the Amazon Mechanical Turk API.

To set up Amazon Mechanical Turk permissions for IAM users

  1. Read Overview of IAM Policies in the IAM User Guide.
  2. Sign in to the IAM console at https://console.aws.amazon.com/iam/home#policies.
  3. On the Policies page, choose AmazonMechanicalTurkFullAccess orAmazonMechanicalTurkReadOnly.
  4. At the top of the page, choose Policy Actions and then choose Attach.
  5. On the Attach Policy page, select the IAM user(s) that you want to set permissions for. Then choose Attach Policy to give those users permission to access the Mechanical Turk API.

What is supported?

API authentication using IAM credentials Yes
Website authentication using IAM credentials No
Action-level permissions for IAM users Yes
Resource-level permissions for IAM users No
Tag-based permissions for IAM users No
Authentication using temporary credentials (roles or groups) No
Authentication using federated user credentials No

Step 5: Set up the Developer Sandbox

You should test your HITs in the Amazon Mechanical Turk sandbox testing environment to make sure they work as expected before publishing your HITs in the Mechanical Turk marketplace. The sandbox provides a testing environment where you can publish and work on HITs to try them out before publishing them in the Amazon Mechanical Turk Marketplace. The sandbox consists of a Requester sandbox website and a Worker sandbox website.

You will need to create a Requester account on the Requester sandbox website, which is located at https://requestersandbox.mturk.com. You’ll also need to create a Worker account on the Worker sandbox website located at https://workersandbox.mturk.com to view your sandbox created HITs as a Worker. There is no charge for using the Mechanical Turk sandbox sites.

Note: To create HITs in the sandbox using the MTurk APIs, you will also need to link your AWS account to your sandbox Requester account as per Link Your AWS account to your MTurk Requester account, on the Requester sandbox website at https://requestersandbox.mturk.com/developer.

When testing in the sandbox, test each HIT in all the major Internet browsers to make sure your HIT works the same in each browser. If you have links to pictures or videos in your HITs, make sure the links work. Also, your testing should includ e verifying that the format of the submitted answers is acceptable.

Step 6: Set up an AWS SDK

The MTurk API can be accessed using the following AWS SDKs: Python/Boto (Boto3), Javascript (NodeJS or Browser), Java, .NET, Go, Ruby, PHP or C++.

Configure the AWS SDK to use the ‘us-east-1’ region. This is the region in which the MTurk API is available. Then connect to the MTurk Developer Sandbox and check your account balance (the Sandbox should always return a balance of $10,000). To connect to the MTurk Developer Sandbox, set the API endpoint in your SDK to https://mturk-requester-sandbox.us-east-1.amazonaws.com.

Step 7: Prepay for Your HITs

Before you use the production version of Amazon Mechanical Turk you need to prepay for the HITs you create. Otherwise, you can’t post your HITs to Workers.

To post your HITs to Workers, you must have money in your Prepaid HIT Balance to prepay for all of your HITs. You can use a credit or debit card or debit card to prepay for the HITs.

For instructions on how to prepay for your HITs, go to the Requester website.