[Backport 1.3] configure ML reserved roles and system indices (#1654)

[ylwu-amzn]

Signed-off-by: Yaliang Wu ylwu@amazon.com

Description

Rebase and backport 3638c6f from #1654

Security team, please help close this PR #1655

Check List

• New functionality includes testing
• New functionality has been documented
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov-commenter]

Codecov Report

Merging #1662 (5f96436) into 1.3 (f53046c) will decrease coverage by 0.01%.
The diff coverage is n/a.

@@             Coverage Diff              @@
##                1.3    #1662      +/-   ##
============================================
- Coverage     64.62%   64.60%   -0.02%     
  Complexity     3216     3216              
============================================
  Files           247      247              
  Lines         17352    17352              
  Branches       3082     3082              
============================================
- Hits          11214    11211       -3     
- Misses         4589     4593       +4     
+ Partials       1549     1548       -1     

Impacted Files	Coverage Δ
...ecurity/configuration/StaticResourceException.java	0.00% <0.00%> (-25.00%)	⬇️
...nsearch/security/dlic/rest/api/AuditApiAction.java	63.82% <0.00%> (-4.26%)	⬇️
...search/security/transport/SecurityInterceptor.java	74.78% <0.00%> (+0.84%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f53046c...5f96436. Read the comment docs.