Amazon Bedrock Sources > Before you begin > Create a connection
  

Create a connection

Before you configure the Amazon Bedrock catalog source, create a connection object in Administrator.
    1In Administrator, select Connections.
    2Click Add Connection.
    3Search for and select Amazon Bedrock and then click Next.
    4Enter the following connection details:
    Property
    Description
    Connection Name
    Name of the connection.
    Each connection name must be unique within the organization. Connection names can contain alphanumeric characters, spaces, and the following special characters: _ . + -,
    Maximum length is 255 characters.
    Description
    Description of the connection. Maximum length is 4000 characters.
    Use Secret Vault
    Stores sensitive credentials for this connection in the secrets manager that is configured for your organization.
    This property appears only if secrets manager is set up for your organization.
    When you enable the secret vault in the connection, you can select the credentials that the Secure Agent retrieves from the secrets manager. If you don't enable this option, the credentials are stored in the repository or on a local Secure Agent, depending on how your organization is configured.
    Note:
    If you’re using this connection to apply data access policies through pushdown or proxy services, you cannot use the Secret Vault configuration option.
    For information about how to configure and use a secrets manager, see Secrets manager configuration.
    Runtime Environment
    The name of the runtime environment where you want to run tasks. Select a Secure Agent, Hosted Agent, serverless, or elastic runtime environment.
    Region Name
    The AWS region that you use to access Amazon Bedrock.
    Default is US East (N. Virginia).
    5Select the authentication type to connect to Amazon Bedrock and enter the required properties.
    You can use the following authentication methods:
    6Click Test to test your connection to the source system.
    7Click Save.

Permanent IAM Credentials authentication

Permanent IAM Credentials authentication requires the access key and the secret key of your IAM user.
The following table describes the connection properties for the Permanent IAM Credentials authentication:
Property
Description
Access Key
The AWS access key to connect to Amazon Bedrock.
Secret Key
The AWS secret key to connect to Amazon Bedrock.

EC2 Instance Profile authentication

EC2 Instance Profile authentication doesn't require any connection properties.

EC2 Role to Assume Role authentication

EC2 Role to Assume Role authentication requires the ARN of the IAM role assumed by your EC2 role. Optionally, you can specify the external ID as an advanced parameter.
The following table describes the connection properties for the EC2 Role to Assume Role authentication:
Property
Description
IAM Role ARN
The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) role assumed by the EC2 role to use the dynamically generated temporary security credentials.
External ID
Advanced parameter. The AssumeRole request parameter to generate temporary session credentials that enable an AWS service to assume a role.