Connecting Retool to Bedrock

Hi everyone,

I'm trying to connect Retool to AWS Bedrock, and encountered some issues.
What I did:
I've created an IAM user named Retool
gave it permission to Bedrock
created the AWS key and secret
added the key and secret to the Retool AI resource.

It does write there to add the session token, but in the docs it says that it's optional, so I didn't add it.

As soon as we try to use it we get the response:

Questions:

  1. I guess the docs are out-of-date/wrong and the token is required?
  2. Is there a way to use bedrock without the token?
  3. Is there a way to assume a role in AWS, instead of passing it the credentials directly? (Some type of service account?)

Thank you in advance,
Oren

1 Like

Hi @Oren_Keller,

Thanks for reaching out

  1. The token is still not required
  2. I just tested this on my side, and I am able to use the Bedrock AI integration without providing a session token on Retool Cloud.
  3. We have a feature request in our backlog for alternative auth options. I can let you know if the request gets picked up

I see AWS can sometimes return this error if the other credentials are wrong :thinking: (for example, if the aws key is incorrect). Have you tested the credentials anywhere else? Any chance this is a permissions or credentials issue?