Amazon Bedrock Agents

Selecting the Connection Type

Once you have selected your connection type, a configuration tab will appear on the next step, prompting you to input the required connection details.

Integration Setup

Figure 1: Amazon Bedrock Agents

• Agent Id - Unique identifier of the Bedrock Agent you want to invoke.

• Agent Alias Id - Identifier of the agent alias to invoke. Aliases route traffic to a specific agent version.

• AWS Region - AWS region where the agent is created (for example: "us-east-1").

• AWS Access Key Id - IAM (Identity and Access Management) access key used to sign Bedrock Agent Runtime requests.

• AWS Secret Access Key - IAM secret access key paired with the Access Key Id. AWS only shows secret keys at creation time, so store it securely.

Possible Internal Server Error When Rate Limit Is Exceeded (Code Interpreter Notice)

If your Bedrock Agent has Code Interpreter enabled, AWS enforces a limit on concurrent active sessions per account/region (minimum 25). When running scans with high concurrency, this limit can be reached quickly, causing requests to fail.

To avoid this, we recommend adjusting the following in Target Configuration:

• Rate Limit to a lower value (e.g. 20 or lower) to control the number of messages per minute.

• Disable Parallel Requests or keep concurrency low.

How to Obtain Required Fields

• Agent Id

  • Open the AWS console and go to Amazon Bedrock → Agents.

  • Select the agent you want to test.

  • Copy Agent ID from the agent details (or extract it from the agent ARN).

• Agent Alias Id

  • Open the same agent in the AWS console.

  • Go to Aliases and pick the alias you want to invoke (for example prod or staging).

  • Copy the Alias ID (or extract it from the alias ARN).

  • Ensure the alias points to the correct agent version you want to test.

• AWS Region

  • Use the same region where you created the agent.

  • Read it from the AWS console region selector (top bar).

• AWS Access Key Id

  • Create an access key for an IAM principal that can invoke the Bedrock Agent Runtime.

  • IAM console path: IAM → Users → select user → Security credentials → Access keys.

  • AWS docs: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html

• AWS Secret Access Key

  • Generated together with the Access Key Id during access key creation.

  • AWS shows the secret value only once. If you lost it, create a new access key.