OptionalauthAuthentication mode. Exactly one variant may be set.
Reference to a Unity Catalog service credential authorizing Bedrock
requests. On Create, supply service_credential.name in the form
credentials/{name}. Required on Create when using service-credential
authentication; mutually exclusive with aws_access_key. The credential
is referenced by name; its value is not carried here. Only
supported on AWS-hosted workspaces.
AWS access-key-pair authentication. Set access_key_id and
secret_access_key.plaintext. Mutually exclusive with
service_credential.
OptionalregionAWS region where the Bedrock endpoint is hosted (e.g., us-east-1).
Required on Create.
Direct form of Amazon Bedrock provider config.
Authentication is one of two mutually exclusive modes, exactly one of which must be supplied on Create:
aws_access_key, leaveservice_credentialunset.service_credential.nameto the resource namecredentials/{name}, leaveaws_access_keyunset. The credential value lives in Unity Catalog and is referenced by name, not held on this message. Setting more than one mode is rejected.