{"resource_type":{"id":331,"name":"aws_bedrock","schema":"{\n\t\"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n\t\"order\": [\n\t\t\"region\",\n\t\t\"apiKey\"\n\t],\n\t\"properties\": {\n\t\t\"apiKey\": {\n\t\t\t\"default\": \"\",\n\t\t\t\"description\": \"AWS bedrock API key (simplest, no need for awsAccessKeyId and awsSecretAccessKey)\",\n\t\t\t\"nullable\": true,\n\t\t\t\"password\": true,\n\t\t\t\"type\": \"string\"\n\t\t},\n\t\t\"awsAccessKeyId\": {\n\t\t\t\"default\": \"\",\n\t\t\t\"description\": \"AWS IAM access key ID (alternative to apiKey)\",\n\t\t\t\"nullable\": true,\n\t\t\t\"password\": true,\n\t\t\t\"type\": \"string\"\n\t\t},\n\t\t\"awsSecretAccessKey\": {\n\t\t\t\"default\": \"\",\n\t\t\t\"description\": \"AWS IAM secret access key (alternative to apiKey)\",\n\t\t\t\"nullable\": true,\n\t\t\t\"password\": true,\n\t\t\t\"type\": \"string\"\n\t\t},\n\t\t\"awsSessionToken\": {\n\t\t\t\"default\": \"\",\n\t\t\t\"description\": \"AWS IAM session token (alternative to apiKey). You will need to refresh this token periodically.\",\n\t\t\t\"nullable\": true,\n\t\t\t\"password\": true,\n\t\t\t\"type\": \"string\"\n\t\t},\n\t\t\"oidcRoleArn\": {\n\t\t\t\"default\": \"\",\n\t\t\t\"description\": \"ARN of an AWS IAM role Windmill assumes through its OIDC provider (alternative to apiKey and to IAM keys). Used only when neither apiKey nor the IAM key pair is set, and requires a region. Requires an enterprise license, and a role whose trust policy accepts your Windmill instance as an OIDC provider with audience sts.amazonaws.com. The token subject differs by caller: <email>::<workspace> from the AI chat, <email>::<path>::<flow_path>::<workspace> from an AI agent step, so a trust policy that conditions on sub must admit both.\",\n\t\t\t\"nullable\": true,\n\t\t\t\"type\": \"string\"\n\t\t},\n\t\t\"region\": {\n\t\t\t\"default\": \"\",\n\t\t\t\"description\": \"AWS Bedrock region (e.g., us-east-1)\",\n\t\t\t\"nullable\": false,\n\t\t\t\"type\": \"string\"\n\t\t}\n\t},\n\t\"required\": [\n\t\t\"region\"\n\t],\n\t\"type\": \"object\"\n}","approved":true,"app":"aws_bedrock","description":"Amazon Bedrock (AWS) credentials: a region plus either a Bedrock API key or IAM access key, secret and session token.","created_by":"hugo989","created_at":"2025-11-13T18:48:16.149Z","format_extension":null,"picks":"12","display_name":"AWS Bedrock"}}