AWS Bedrock

AWS Bedrock provides enterprise-grade access to Claude and other models within your AWS infrastructure.

Overview

AWS Bedrock advantages:

• Data stays within your AWS account
• Integration with AWS security services
• VPC endpoints for private access
• IAM-based access control
• Compliance certifications (SOC, HIPAA, FedRAMP)

Available Models

Prerequisites

Enable Model Access

1. Open AWS Console → Bedrock
2. Go to Model access
3. Request access to Claude models
4. Wait for approval (usually instant)

IAM Permissions

Create an IAM policy:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "bedrock:InvokeModel",
        "bedrock:InvokeModelWithResponseStream"
      ],
      "Resource": "arn:aws:bedrock:*::foundation-model/anthropic.*"
    }
  ]
}

Authentication

AWS CLI Configuration

aws configure
# Enter Access Key ID
# Enter Secret Access Key
# Enter default region (e.g., us-east-1)

Environment Variables

export AWS_ACCESS_KEY_ID="AKIA..."
export AWS_SECRET_ACCESS_KEY="..."
export AWS_REGION="us-east-1"

IAM Role (EC2/ECS/Lambda)

When running on AWS infrastructure, use IAM roles:

{
  "provider": {
    "bedrock": {
      "options": {
        "region": "us-east-1"
      }
    }
  }
}

AWS SSO

aws sso login --profile your-profile
export AWS_PROFILE="your-profile"

Configuration

Basic Setup

{
  "provider": {
    "bedrock": {
      "options": {
        "region": "us-east-1"
      }
    }
  },
  "model": "bedrock/anthropic.claude-sonnet-4-20250514-v1:0"
}

Cross-Region Inference

Enable cross-region inference for higher limits:

{
  "provider": {
    "bedrock": {
      "options": {
        "region": "us-east-1",
        "crossRegionInference": true
      }
    }
  }
}

VPC Endpoint

For private network access:

{
  "provider": {
    "bedrock": {
      "options": {
        "region": "us-east-1",
        "endpointUrl": "https://vpce-xxx.bedrock.us-east-1.vpce.amazonaws.com"
      }
    }
  }
}

Usage

Command Line

cyberstrike --model bedrock/anthropic.claude-sonnet-4-20250514-v1:0

In-Session

/model
# Select Bedrock model

Provisioned Throughput

For consistent performance:

Create Provisioned Capacity

aws bedrock create-provisioned-model-throughput \
  --model-id anthropic.claude-sonnet-4-20250514-v1:0 \
  --provisioned-model-name my-claude \
  --model-units 1

Use Provisioned Model

{
  "model": "bedrock/arn:aws:bedrock:us-east-1:123456789:provisioned-model/my-claude"
}

Guardrails

Apply AWS Bedrock Guardrails:

{
  "provider": {
    "bedrock": {
      "options": {
        "guardrailId": "abc123",
        "guardrailVersion": "1"
      }
    }
  }
}

Create guardrails in AWS Console to:

• Filter sensitive topics
• Block specific content
• Apply word filters
• Control PII handling

Monitoring

CloudWatch Metrics

Enable detailed monitoring:

• Invocations - Number of requests
• InvocationLatency - Response time
• InputTokenCount - Tokens processed
• OutputTokenCount - Tokens generated

CloudTrail Logging

All Bedrock API calls are logged to CloudTrail for audit.

Cost Management

Pricing Tiers

Budget Alerts

Set up AWS Budget alerts:

aws budgets create-budget \
  --account-id 123456789 \
  --budget file://bedrock-budget.json

Best Practices

Security

1. Use IAM roles instead of access keys
2. Enable VPC endpoints for private access
3. Apply guardrails for content filtering
4. Enable CloudTrail logging
5. Use least-privilege IAM policies

Performance

1. Choose region closest to your location
2. Enable cross-region inference
3. Consider provisioned throughput for production
4. Monitor latency with CloudWatch

Compliance

1. Enable AWS Config rules
2. Use AWS Organizations SCPs
3. Enable AWS Artifact for compliance reports
4. Document data handling procedures

Troubleshooting

Access Denied

Error: Access Denied

Verify:

• Model access is enabled
• IAM permissions are correct
• Region is correct

Model Not Found

Error: Model not found

Check:

• Model ID is correct
• Model is available in region
• Cross-region inference if needed

Throttling

Error: ThrottlingException

Solutions:

• Request limit increase
• Enable cross-region inference
• Use provisioned throughput

Related Documentation

• Providers Overview - All providers
• Anthropic - Direct API comparison
• Configuration - Full options