Updated Process to Enabling Bedrock Models in GovCloud: Chat/Playground Feature or AWS CLI Approach

Prerequisites

• An active AWS GovCloud (US) account is required.
• Appropriate permissions within this account to access the Bedrock console and AWS CLI.
• Access to the standard AWS account that is linked to the GovCloud (US) account.

Understanding the Process

For GovCloud (US) region, accessing a foundation model in Amazon Bedrock requires an initial request for access. This involves agreeing to the End User License Agreement (EULA) in the standard AWS regions (us-east-1 or us-west-2). An EULA can be created manually by calling the 'ListFoundationModelAgreementOffers' and 'CreateFoundationModelAgreement' in the AWS API.

Steps to Request Model Access

This process involves the following steps:

1. Identify the Linked Standard AWS Account:

Note: This information cannot be recovered through AWS Support.

Note: If the linked standard AWS account is already known, proceed directly to Method 1. Otherwise, follow these steps to identify the linked account:

1. Access AWS GovCloud Support Center:

• Sign in to the AWS GovCloud (US) account
• Navigate to AWS Support Center
• Locate a recent support case

2. Find Associated Email Address:

• Review the support case details
• Identify the email address used when creating the case
• If the email address has not changed since opening the case, this is the email address associated with the linked standard AWS account.

3. Access Standard AWS Account:

• Visit the AWS Management Console (standard)
• Sign in using the identified email address as the root user
• Once authenticated, locate the account ID in the AWS console navigation bar

The identified account ID is the standard AWS account linked to the GovCloud (US) account which will be used to initiate the Bedrock model request.

Note: There are two methods to request access.

Method 1: Request Access via the Bedrock Console:

• Sign in to your standard AWS account using either the us-east-1 or us-west-2 region.
• Open the Amazon Bedrock and navigate to the Chat / Text playground area.
• Choose the foundation model you want to enable.
• Write a prompt and choose Run to generate a response. This is essentially invoking the model and will establish the EULA granting regional entitlement to access the models in GovCloud.

Method 2: Request Access via the AWS CLI:

• Sign in to your standard AWS account using either the us-east-1 or us-west-2 region.
• Open the AWS CLI.
• Run the following command using the AWS CLI to get all of the foundation models:

aws bedrock list-foundation-models

• Copy the model ID you want to enable.
• Run the following command using the AWS CLI to list the model agreement offer:

aws bedrock list-foundation-model-agreement-offers --model-id <model-id>

• The output will show an offerToken
• Run the following command using the AWS CLI to create the foundation model agreement:

aws bedrock create-foundation-model-agreement --model-id <model-id> --offer-token <offerToken>

• Go to your GovCloud account and enable the same models via the console using the Model Access page.

Note: It may take a few minutes for the entitlements to propagate from the standard AWS account to GovCloud.

Final Thoughts

This process enables AWS GovCloud (US) customers to effectively manage Amazon Bedrock model access. The key points to remember are:

• Initial access must be granted through the associated standard AWS account
• Only one of the listed methods is needed to request access.

Related Information

[+] Access Amazon Bedrock foundation models in AWS GovCloud (US)

[+] Finding your associated standard AWS account ID

[+] Sign in to the AWS Management Console as the root user