# How to configure AWS Bedrock in AI Assistant inside Elastic Cloud?

**URL:** <https://discuss.elastic.co/t/how-to-configure-aws-bedrock-in-ai-assistant-inside-elastic-cloud/372185>\
**Category:** Elastic Security\
**Created:** [December 19, 2024, 1:04am UTC](https://discuss.elastic.co/t/how-to-configure-aws-bedrock-in-ai-assistant-inside-elastic-cloud/372185 "2024-12-19T01:04:15Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Illya\_Bjazevic](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/illya_bjazevic/32/139677_2.png) [@Illya\_Bjazevic](https://discuss.elastic.co/u/Illya_Bjazevic)\
**Post date:** [December 19, 2024, 1:04am UTC](https://discuss.elastic.co/t/how-to-configure-aws-bedrock-in-ai-assistant-inside-elastic-cloud/372185/1 "2024-12-19T01:04:15Z")

</div>

I am trying to configure AWS Bedrock in AI Assistant inside Elastic Cloud.

By default the only empty sections are Access key and Secret. I just opened a new AWS account and I got access to Claude 3.5 Sonnet that is the default AWS Bedrock model that is in the default options of Elastic Cloud. I was authorized to use the model and Claude 3.5 Sonnet is working properly inside AWS in the playground. I have OpenAI and Google Gemini working inside Elastic Cloud. What can I do? I have created two keys in AWS and none of them are working. This is the error that I am getting:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/3/939f3420103d38aa42ca8d32843bd611c80e1d3e.png)

Finally, Claude 3.5 Sonnet suggested this JSON policy but it is not working. I tried with a broader policy and it did not work as well.

```auto
> {
> "Version": "2012-10-17",
> "Statement": [
> {
> "Effect": "Allow",
> "Action": [
> "bedrock:InvokeModel",
> "bedrock:ListFoundationModels"
> ],
> "Resource": "arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-3-5-sonnet-20240620-v1:0"
> }
> ]
> }

```

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [December 19, 2024, 1:06am UTC](https://discuss.elastic.co/t/how-to-configure-aws-bedrock-in-ai-assistant-inside-elastic-cloud/372185/2 "2024-12-19T01:06:59Z")

</div>

Hi, did you follow the instructions here?

> **[Connect to Amazon Bedrock | Elastic Security Solution \[8.17\] | Elastic](https://www.elastic.co/guide/en/security/current/assistant-connect-to-bedrock.html)**

We highlight some additional permissions which you did not include in your policy.

James

---

<div class="post-metadata">

**Author:** ![Illya\_Bjazevic](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/illya_bjazevic/32/139677_2.png) [@Illya\_Bjazevic](https://discuss.elastic.co/u/Illya_Bjazevic)\
**Post date:** [December 19, 2024, 8:01am UTC](https://discuss.elastic.co/t/how-to-configure-aws-bedrock-in-ai-assistant-inside-elastic-cloud/372185/6 "2024-12-19T08:01:53Z")

</div>

Thank you, James! I am your big fan! I always watch your videos! Your advice helped me a lot. I did everything that you mentioned, and it was not working. **At the end, I figured out that the problem was that Elastic was in one AWS region, and my account was in a different region. That was the problem. Amazing, right?** However, the AWS Bedrock connector inside Elastic Cloud is working now!!! I appreciate your help!

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [December 19, 2024, 5:12pm UTC](https://discuss.elastic.co/t/how-to-configure-aws-bedrock-in-ai-assistant-inside-elastic-cloud/372185/7 "2024-12-19T17:12:16Z")

</div>

Great to hear, and thank you for the kind words!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 16, 2025, 5:12pm UTC](https://discuss.elastic.co/t/how-to-configure-aws-bedrock-in-ai-assistant-inside-elastic-cloud/372185/8 "2025-01-16T17:12:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.