Connections > Amazon Bedrock connection properties > Connect to Amazon Bedrock
  

Connect to Amazon Bedrock

Let's configure the Amazon Bedrock connection properties to connect to Amazon Bedrock.

Before you begin

Before you get started, you'll need to get information from your Amazon Bedrock account based on the authentication type that you want to configure.
Check out Prepare for authentication to learn more about the authentication prerequisites.

Connection details

The following table describes the basic connection properties:
Property
Description
Connection Name
Name of the connection.
Each connection name must be unique within the organization. Connection names can contain alphanumeric characters, spaces, and the following special characters: _ . + -,
Maximum length is 255 characters.
Description
Description of the connection. Maximum length is 4000 characters.
Use Secret Vault
Stores sensitive credentials for this connection in the secrets manager that is configured for your organization.
This property appears only if secrets manager is set up for your organization.
This property is not supported by Data Ingestion and Replication and the Data Access Management services.
When you enable the secret vault in the connection, you can select the credentials that the Secure Agent retrieves from the secrets manager. If you don't enable this option, the credentials are stored in the repository or on a local Secure Agent, depending on how your organization is configured.
Note:
If you’re using this connection to apply data access policies through pushdown or proxy services, you cannot use the Secret Vault configuration option.
For information about how to configure and use a secrets manager, see Secrets manager configuration.
Runtime Environment
The name of the runtime environment where you want to run tasks. Select a Secure Agent, Hosted Agent, serverless, or elastic runtime environment.
Region Name
The AWS region that you use to access Amazon Bedrock.
Default is US East (N. Virginia).

Authentication types

You can configure your Amazon Bedrock connection to use the Permanent IAM Credentials, EC2 Instance Profile, or EC2 Role to Assume Role authentication type.
Select the required authentication type and then configure the authentication-specific parameters.

Permanent IAM Credentials authentication

Permanent IAM Credentials authentication requires the access key and the secret key of your IAM user.
The following table describes the connection properties for the Permanent IAM Credentials authentication:
Access Key
The AWS access key to connect to Amazon Bedrock.
Secret Key
The AWS secret key to connect to Amazon Bedrock.

EC2 Instance Profile authentication

EC2 Instance Profile authentication doesn't require any connection properties.

EC2 Role to Assume Role authentication

EC2 Role to Assume Role authentication requires the ARN of the IAM role assumed by your EC2 role. Optionally, you can specify the external ID as an advanced parameter.
The following table describes the connection properties for the EC2 Role to Assume Role authentication:
IAM Role ARN
The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role assumed by the EC2 role to use the dynamically generated temporary security credentials.
External ID
Advanced parameter. The AssumeRole request parameter to generate temporary session credentials that enable an AWS service to assume a role.