OptionalauthAuthentication mode. Exactly one variant may be set.
Reference to a UC service credential authorizing Bedrock requests. On
Create the caller supplies service_credential.name in the AIP-122
resource-name form credentials/{name}. Required on Create when using
UC-service-credential auth; mutually exclusive with aws_access_key. The
credential is referenced by name; its value is not carried here. On read the
resolved id and is_deleted are also populated. Only supported on AWS-hosted
workspaces; Create requests from other clouds are rejected with
INVALID_PARAMETER_VALUE.
AWS access-key-pair auth. Mutually exclusive with service_credential.
OptionalregionAWS region where the Bedrock endpoint is hosted (e.g., us-east-1).
Required on Create.
Direct form of Amazon Bedrock provider config.
Authentication is one of two mutually exclusive modes, exactly one of which must be supplied on Create:
aws_access_key, leaveservice_credentialunset.service_credential.nameto the AIP-122 resource-name formcredentials/{name}, leaveaws_access_keyunset. The credential value lives in UC and is referenced by name, not held on this message. Setting more than one mode is rejected.