Custom Model Configurations
AWS Bedrock w/ Profile Authentication

AWS Bedrock with Profile Authentication

Learn how to configure AWS Bedrock to use AWS Profiles for authentication with Bwat, focusing on secure SSO/Federated role access.

Overview

Bwat supports AWS credential authentication through both direct IAM keys and AWS profiles. This guide focuses on the recommended approach using SSO/Federated roles for enhanced security when accessing AWS Bedrock services.

Setup Instructions

Install AWS CLI

Download and install the latest AWS CLI version for your operating system.

Configure IAM Authentication

Follow AWS's SSO configuration guide:

  • New users: Set up IAM through the Identity Center guide (opens in a new tab) with PowerUserAccess role
  • Enterprise users: Access your AWS portal and verify PowerUserAccess permissions
  • Note your SSO start URL and SSO region from the Access keys section

Complete Profile Setup

Using the AWS CLI wizard:

  1. Authenticate with: aws sso login --profile <your-profile-name>
  2. Remember your profile name for Bwat configuration

Install Prerequisites

Configure Bwat Integration

In the Bwat extension:

  1. Open settings (⚙️ icon)
  2. Select "AWS Bedrock" as API Provider
  3. Choose "AWS Profile" authentication
  4. Enter your profile name from step 3
  5. Select AWS region
  6. Enable cross-region inference if required for your models

AWS Bedrock configuration in Bwat settings showing profile authentication

Key Benefits

  • Enhanced Security: Uses temporary SSO credentials instead of permanent IAM keys
  • Enterprise Ready: Supports federated access common in organizational environments
  • Simplified Management: Profile-based authentication reduces credential handling

For troubleshooting, verify your AWS profile is active using aws sts get-caller-identity --profile <your-profile-name> before configuring Bwat.

AWS BedrockGCP Vertex AI