From f828ce03a0116f91237f0035e79464141d600000 Mon Sep 17 00:00:00 2001
From: brajul <brajul@amazon.com>
Date: Thu, 12 Mar 2026 03:00:05 +0000
Subject: [PATCH] fix: skip credential validation for Bedrock backend

Bedrock uses IAM credentials (instance roles, env vars, SSO) resolved
by the AWS SDK at call time, so `provider` is never set during startup.
Exclude it from the post-init validation that checks for missing API keys.

Closes #1009
---
 src/app.rs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/app.rs b/src/app.rs
index c53bebab97d..283da2e0371 100644
--- a/src/app.rs
+++ b/src/app.rs
@@ -672,7 +672,10 @@ impl AppBuilder {
         // Post-init validation: if a non-nearai backend was selected but
         // credentials were never resolved (deferred resolution found no keys),
         // fail early with a clear error instead of a confusing runtime failure.
-        if self.config.llm.backend != "nearai" && self.config.llm.provider.is_none() {
+        if self.config.llm.backend != "nearai"
+            && self.config.llm.backend != "bedrock"
+            && self.config.llm.provider.is_none()
+        {
             let backend = &self.config.llm.backend;
             anyhow::bail!(
                 "LLM_BACKEND={backend} is configured but no credentials were found. \