GovCloud bedrock - can't find model-import-job after creating it

Question

On GovCloud I submitted a job to create a new model via the command line after uploading the model to S3 using the helper scripts found at https://github.com/masquare/huggingface-bedrock-importer

```
aws bedrock create-model-import-job --job-name "deepseek-import-$(date +%s)" --imported-model-name "DeepSeek-R1-Distill-Llama-70B" --model-data-source "s3
DataSource={s3Uri=s3://}" --region us-gov-west-1 --role-arn "arn:aws-us-gov:iam:::role/aws-reserved/sso.amazonaws.com/us-gov-west-1/"
{
    "jobArn": "arn:aws-us-gov:bedrock:us-gov-west-1::model-import-job/3n5ie1eixnj0"
}
```

The job doesn't appear in the UI and querying for it from the command line gives me a permission error:

```
aws bedrock get-model-import-job --job-identifier "arn:aws-us-gov:bedrock:us-gov-west-1::model-import-job/3n5ie1eixnj0"
An error occurred (AccessDeniedException) when calling the GetModelImportJob operation: Your account is not authorized to invoke this API operation.
```

I waited the whole weekend as I was told that it can take a while top complete. Billing showed no money spent, so I infer that the job wasn't run.

re:Post Agent · Answer

It appears you're encountering a permissions issue when trying to access the model import job in Amazon Bedrock on AWS GovCloud. This could be due to a few reasons:

1. IAM Role Permissions: The IAM role you're using might not have the necessary permissions to perform the GetModelImportJob operation. Ensure that your IAM role has the appropriate permissions for Amazon Bedrock, including actions related to model import jobs.

2. Service Role: The role ARN you provided in the create-model-import-job command might not have the required permissions to perform the import job or to be assumed by the Bedrock service.

3. API Availability: It's possible that the GetModelImportJob API might not be fully available or implemented in the GovCloud region for Bedrock at this time.

To troubleshoot:

1. Double-check the permissions of the IAM role you're using to make the API calls. Ensure it has the necessary Bedrock permissions, including those for creating and viewing model import jobs.

2. Verify that the service role ARN you provided in the create-model-import-job command has the correct permissions and trust relationship to allow Bedrock to assume it.

3. Try using the ListModelImportJobs API instead of GetModelImportJob to see if you can view a list of all import jobs.

4. Check if you can view the job in the Bedrock console under the "Custom models" section and the "Jobs" tab.

5. Ensure that you're using the latest version of the AWS CLI and that it supports the Bedrock operations for GovCloud.

6. Contact AWS Support for GovCloud if the issue persists, as they may have more specific information about the availability and implementation of Bedrock features in the GovCloud environment.

Remember that AWS GovCloud may have some differences in feature availability or implementation compared to standard AWS regions, so some operations might not be fully supported or may require additional configurations.  
**Sources**  
[View information about model copy jobs - Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/copy-model-job-view.html)  
[Service role requirements for knowledge base evaluation jobs - Amazon Bedrock](https://docs.aws.amazon.com/bedrock/latest/userguide/rag-eval-service-roles.html)

GovCloud bedrock - can't find model-import-job after creating it

Add your answer

Relevant content