Unable to Configure AWS Credentials for Local AWS Bedrock Access

I want to use AWS Bedrock from my local environment. To do that, I need to configure AWS using the aws configure command. However, I’m unable to create the security credentials (Access Key ID and Secret Access Key) for the default profile. Could you please let me know how I can set this up and access AWS Bedrock from my local machine?

Also let me know which AWS AI service i can use from my local python file.

  1. For setting up access on your laptop, you need to create a new pair of access keys. You do this by:

    • Go to the account menu (it’s at the upper right side of the screen) and from that menu select “Security Credentials”.
    • From the “Access Key” section of the page, click the “Create access key” button
    • Down load the key pair it creates, and use it with “aws credentials” to configure AWS to use that key pair.
  2. We don’t support using Bedrock API keys on the playground. You probably want to use KodeKey to get keys from there instead, which will work if you have a Standard or better account with us.

@rob_kodekloud ,I followed the steps above, but I’m still unable to complete it. I’m getting the following error

Note - I am getting the following error in the AWS AI Playground. However, when I run the same request in AWS playground it works as expected.

You need permissions

User: arn:aws:iam::393078901895:user/kk_labs_user_653850 is not authorized to perform: iam:CreateAccessKey on resource: user kk_labs_user_653850 because no identity-based policy allows the iam:CreateAccessKey action

Sorry about that. Our lab engineers appear to have disabled creating access keys for that particular playground; this works in the regular AWS playground, but not in this particular playground, for whatever reason.

You can still use KodeKey to get access to some LLM models, and that’s the probable work-around.

@rob_kodekloud , Is there any chance to enable access key. I want to use AWS AI

You can, but only via the console. Typically when the AWS team does this, they’re trying to prevent certain kinds of abuse of the accounts. I don’t always agree with their doing this, but they tend to be fairly inflexible on the issue. So it’s unlikely they’d relent on this, unfortunately.

Which serviced of AWS AI we can use from local system.