# Amazon Bedrock Credential Setup

This guide will walk you through the process of setting up Amazon Bedrock credentials for use with Tailwinds.

{% hint style="warning" %}
It is Amazon recommended best practice to enable a minimum 90 day IAM key rotation.
{% endhint %}

### Step-by-Step Guide

1. **Log in to your AWS account**
   * Login to your AWS account through the AWS Management Console.
2. **Navigate to IAM**
   * Navigate to the `Identity and Access Management` (IAM) service.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2FW7lBaIpcOnWf5BxNLteN%2Fimage.png?alt=media&#x26;token=484a403d-1084-4293-98fb-9a3c69f02eb6" alt=""><figcaption></figcaption></figure>
3. **Create a new user**
   * Select `Users` from the left-hand navigation.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2Fj6QIZWYKbna1naiSqRWw%2Fimage.png?alt=media&#x26;token=40458b58-2ee0-4805-a124-5141a2349f3c" alt=""><figcaption></figcaption></figure>
   * Click `Create user`.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2FeuAItSbAWF0waSOCR1hO%2Fimage.png?alt=media&#x26;token=1718abe5-1583-4901-b880-4ab0b51e39d5" alt=""><figcaption></figcaption></figure>
   * Give the user a name.
   * **Important:** Do NOT give it AWS Management Console access.
4. **Create and attach a policy**
   * Create a policy.
   * Select the Bedrock service.
   * Create a policy, select the bedrock service, and grant it InvokeModel and InvokeModelWithResponseStream allow on any foundation or provisioned model.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2Fa0s7vdTdc8NDaKQPg3Et%2Fimage.png?alt=media&#x26;token=1dd868aa-0785-407f-bf35-e7d566395cb0" alt=""><figcaption></figcaption></figure>
   * Attach the policy to the user.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2F0cFAMAQfwIEPebwHlUIq%2Fimage.png?alt=media&#x26;token=c32d7914-28d3-4d07-ae91-eeb00f6c6ea3" alt=""><figcaption></figcaption></figure>
5. **Generate access keys**
   * Create the user, then click into the user and navigate to `Security credentials`.
   * Click `Create access key` and select the `Other` Use Case.
   * Download the key and keep it in a safe place (secret store, etc).
6. **Set up Bedrock model access**

   * Navigate back to the Bedrock service.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2Fahm0EhSAxD8dfsdOgtAP%2Fimage.png?alt=media&#x26;token=5025af8b-e432-4b3a-a8b9-fcd5b12a6ae5" alt=""><figcaption></figcaption></figure>

   * In the left-hand menu navigate to Model access.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2FmMTi5JBKIeGeoJjD5tOh%2Fimage.png?alt=media&#x26;token=0e7208fd-ee98-4ac9-9c02-6dc7d1a23e66" alt=""><figcaption></figcaption></figure>

   * Select `Enable specific models`.

   * Select the models you want to try (e.g. all Amazon and all Anthropic).<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2FpIO3hR8yhI6uR2VjteHM%2Fimage.png?alt=media&#x26;token=fc9768aa-8436-4779-a6f6-b90dc886ecf7" alt=""><figcaption></figcaption></figure>

   * Enter your business information and submit access request.

   > Note: Amazon model access is typically granted immediately and other model provider access is typically granted within minutes, although it's not guaranteed.
7. **Add credentials to Tailwinds**
   * Add as credential to Bedrock within Tailwinds Credentials page.<br>

     <figure><img src="https://662370747-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F3VoWwSsyrEg0DEvIIjv9%2Fuploads%2FJYCS60lpFYi8Kf5tSqPg%2Fimage.png?alt=media&#x26;token=138ec85e-6d07-4785-8c0b-781b6c0331a5" alt=""><figcaption></figcaption></figure>

Congratulations! You've successfully set up Amazon Bedrock credentials for use with Tailwinds.
