# Set up Amazon Bedrock

Last validated May 11, 2026

\[Missing snippet: aperture\_release\_note.mdx]

Configure an Amazon Bedrock provider in Aperture so your team can access AWS foundation models through your tailnet. Bedrock uses region-specific URLs and has its own model naming conventions, both of which you configure in the provider definition.

\[Missing snippet: aperture\_any\_provider.mdx]

## Prerequisites

Before you begin, you need:

* An Aperture instance accessible from your device. Refer to [get started with Aperture][kb-aperture-get-started] if you have not set this up.
* An AWS account with Bedrock model access enabled in your target region.
* A [Bedrock API key][xt-bedrock-api-keys]. Generate a long-term API key in the Amazon Bedrock console. Aperture sends this key as a bearer token in the `Authorization` header and does not perform AWS signature verification or generate temporary credentials.

## Configure the provider

Add Amazon Bedrock as a provider in your [Aperture configuration][kb-aperture-configuration]. Bedrock URLs are region-specific, using the format `https://bedrock-runtime.<region>.amazonaws.com`. Check the [AWS Bedrock documentation][xt-bedrock-regions] to confirm your target models are available in your chosen region.

The following example shows a configuration for the US East region with Anthropic Claude models. Model names must match exactly, including the region prefix and version suffix. Refer to the [AWS Bedrock documentation][xt-bedrock-regions] for the full list of available model names.

```json
{
  "providers": {
    "bedrock": {
      "baseurl": "https://bedrock-runtime.us-east-1.amazonaws.com",
      "apikey": "<your-bedrock-api-key>",
      "authorization": "bearer",
      "models": [
        "us.anthropic.claude-haiku-4-5-20251001-v1:0",
        "us.anthropic.claude-sonnet-4-6",
        "us.anthropic.claude-opus-4-6-v1",
        "us.anthropic.claude-opus-4-7"
      ],
      "cost_basis": "bedrock-us",
      "compatibility": {
        "bedrock_model_invoke": true,
        "bedrock_converse": true
      }
    }
  }
}
```

Replace `<your-bedrock-api-key>` with your Bedrock API key.

The configuration fields work as follows:

* **`bedrock_model_invoke`** enables the Bedrock InvokeModel endpoint, which is the standard Bedrock API. Most coding tools use this endpoint. If your tools use the Bedrock Converse API instead, add `"bedrock_converse": true` to the `compatibility` section. You can enable both flags simultaneously.
* **`cost_basis`** controls how Aperture calculates costs for requests. Use `bedrock-us` for US-region pricing, `bedrock-eu` for EU-region pricing, or `bedrock` for default Bedrock pricing. You must set this field explicitly because Aperture cannot auto-infer pricing for Bedrock providers.
* **`authorization`** is set to `bearer` because Aperture passes the API key directly as a bearer token in the `Authorization` header.

For the full list of compatibility flags, refer to the [provider compatibility reference][kb-provider-compatibility].

After configuring the provider:

1. [Grant model access][kb-grant-model-access] to the users or groups that need the Bedrock models.
2. [Set up LLM clients][kb-use-your-tools] to connect coding tools through Aperture.

## Verify the provider

\[Missing snippet: aperture\_verify\_provider.mdx]

## Next steps

* [Grant model access][kb-grant-model-access] to users or groups that need the Bedrock models.
* [Set up LLM clients][kb-use-your-tools] to connect coding tools through Aperture.
* Refer to the [provider compatibility reference][kb-provider-compatibility] for the full list of compatibility flags and configuration options.
* Refer to the [Aperture configuration reference][kb-aperture-configuration] for details on multi-region provider setups and credential rotation.

[kb-aperture-configuration]: /docs/aperture/configuration

[kb-aperture-get-started]: /docs/aperture/get-started

[kb-grant-model-access]: /docs/aperture/how-to/grant-model-access

[kb-provider-compatibility]: /docs/aperture/provider-compatibility

[kb-use-your-tools]: /docs/aperture/use-your-tools

[xt-bedrock-api-keys]: https://docs.aws.amazon.com/bedrock/latest/userguide/api-keys.html

[xt-bedrock-regions]: https://docs.aws.amazon.com/bedrock/latest/userguide/models-regions.html
