Skip to content

feat: add AWS Bedrock LLM provider via native Converse API #345

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
cgorski wants to merge 6 commits into from
Closed

feat: add AWS Bedrock LLM provider via native Converse API #345

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
ca5a382
feat: add AWS Bedrock LLM provider via native Converse API
cgorski Feb 24, 2026
d946241
fix: use JSON parsing for tool result error detection instead of brit…
cgorski Feb 24, 2026
a58a615
refactor: extract duplicated inference config builder into helper fun…
cgorski Feb 24, 2026
aa40873
fix: address review feedback — safe casts, input validation, and tests
cgorski Mar 2, 2026
2f72e3e
fix: persist AWS_PROFILE for Bedrock named profile auth
cgorski Mar 2, 2026
6650ebf
feat: gate AWS Bedrock behind optional `bedrock` feature flag
cgorski Mar 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0

## [Unreleased]

### Added

- AWS Bedrock LLM provider via native Converse API with bearer token, IAM, and SSO auth support (feature-gated: `--features bedrock`)

## [0.13.0](https://github.com/nearai/ironclaw/compare/v0.12.0...v0.13.0) - 2026-03-02

### Added
Expand Down
10 changes: 10 additions & 0 deletions CLAUDE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -403,6 +403,14 @@ SKILLS_AUTO_DISCOVER=true # Scan skill directories on startup
# Tinfoil private inference
TINFOIL_API_KEY=... # Required when LLM_BACKEND=tinfoil
TINFOIL_MODEL=kimi-k2-5 # Default model

# AWS Bedrock (native Converse API, requires --features bedrock)
LLM_BACKEND=bedrock
BEDROCK_REGION=us-east-1 # AWS region
BEDROCK_MODEL=anthropic.claude-opus-4-6-v1 # Required model ID
BEDROCK_CROSS_REGION=us # Cross-region prefix (us/eu/apac/global)
AWS_BEARER_TOKEN_BEDROCK=... # Bedrock API key (bearer token auth)
# AWS_PROFILE=my-profile # Named profile (SSO/assume-role)
```

### LLM Providers
Expand All @@ -417,6 +425,8 @@ IronClaw supports multiple LLM backends via the `LLM_BACKEND` env var: `nearai`

**Tinfoil** -- Private inference via `https://inference.tinfoil.sh/v1`. Runs models inside hardware-attested TEEs so neither Tinfoil nor the cloud provider can see prompts or responses. Uses the OpenAI-compatible Chat Completions API. Configure with `TINFOIL_API_KEY` and `TINFOIL_MODEL` (default: `kimi-k2-5`).

**AWS Bedrock** -- Uses the native Converse API via `aws-sdk-bedrockruntime`. Requires `--features bedrock` at build time (not included in default features due to heavy AWS SDK dependencies). Supports all Bedrock auth methods: bearer token (`AWS_BEARER_TOKEN_BEDROCK`), IAM credentials (`AWS_ACCESS_KEY_ID`/`AWS_SECRET_ACCESS_KEY`), SSO profiles (`AWS_PROFILE`), and instance roles. Configure with `BEDROCK_REGION` (default: `us-east-1`), `BEDROCK_MODEL` (required, e.g., `anthropic.claude-opus-4-6-v1`), and `BEDROCK_CROSS_REGION` (optional: `us`, `eu`, `apac`, `global` for cross-region inference profiles). The SDK credential chain resolves auth automatically from the environment.

## Database

IronClaw supports two database backends, selected at compile time via Cargo feature flags and at runtime via the `DATABASE_BACKEND` environment variable.
Expand Down
Loading