Skip to main content
Applies to:
  • Plan - Any
  • Deployment - Hosted
  • Use case - Organizations that prohibit static AWS IAM credentials and need to use IAM role assumption to connect Braintrust to AWS Bedrock

​
Summary

Goal: Configure Braintrust to access AWS Bedrock using IAM role assumption instead of static credentials. Features: Bedrock AI provider, Assume Role authentication, cross-region inference profiles.

​
Configuration steps

​
Step 1: Add Bedrock provider in Braintrust

Go to Settings > AI providers. Click Organization provider or Project provider, then choose Bedrock. On Setup, under Authentication, select Assume role. Braintrust displays two values you will need:
  • Braintrust AWS account ID
  • External ID

​
Step 2: Create an IAM role in AWS

Create a new IAM role in your AWS account with the following trust policy. Replace the placeholders with the values from Step 1.