# Amazon Bedrock Agents

## Selecting the Connection Type

Once you have [selected your connection type](/ai-red-teaming/probe/target/add-target/integration-setup.md#selecting-a-connection-type), a configuration tab will appear on the next step, prompting you to input the required connection details.

## Integration Setup

<figure><img src="/files/vEGvmafqSBXWYyNwoHiB" alt=""><figcaption><p>Figure 1: Amazon Bedrock Agents</p></figcaption></figure>

* **Agent Id** - Unique identifier of the Bedrock Agent you want to invoke.
* **Agent Alias Id** - Identifier of the **agent alias** to invoke. Aliases route traffic to a specific agent version.
* **AWS Region** - AWS region where the agent is created (for example: `"us-east-1"`).
* **AWS Access Key Id** - IAM (Identity and Access Management) access key used to sign Bedrock Agent Runtime requests.
* **AWS Secret Access Key** - IAM secret access key paired with the Access Key Id. AWS **only shows secret keys at creation time**, so store it securely.

{% hint style="warning" %}
**Possible Internal Server Error When Rate Limit Is Exceeded (Code Interpreter Notice)**

\
If your Bedrock Agent has **Code Interpreter enabled**, AWS enforces a limit on concurrent active sessions per account/region (minimum 25). When running scans with high concurrency, **this limit can be reached quickly, causing requests to fail.**<br>

To avoid this, we recommend adjusting the following in [Target Configuration](/ai-red-teaming/probe/target/add-target/target-configuration.md):

* **Rate Limit** to a lower value (e.g. **20 or lower**) to control the number of messages per minute.
* **Disable Parallel Requests** or keep concurrency low.
  {% endhint %}

## How to Obtain Required Fields

* **Agent Id**
  * Open the AWS console and go to **Amazon Bedrock** → **Agents**.
  * Select the agent you want to test.
  * Copy **Agent ID** from the agent details (or extract it from the agent ARN).
* **Agent Alias Id**
  * Open the same agent in the AWS console.
  * Go to **Aliases** and pick the alias you want to invoke (for example `prod` or `staging`).
  * Copy the **Alias ID** (or extract it from the alias ARN).
  * Ensure the alias points to the correct agent version you want to test.
* **AWS Region**
  * Use the same region where you created the agent.
  * Read it from the AWS console region selector (top bar).
* **AWS Access Key Id**
  * Create an access key for an IAM principal that can invoke the Bedrock Agent Runtime.
  * IAM console path: **IAM** → **Users** → select user → **Security credentials** → **Access keys**.
  * AWS docs: <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html>
* **AWS Secret Access Key**
  * Generated together with the Access Key Id during access key creation.
  * AWS shows the secret value only once. If you lost it, create a new access key.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.probe.splx.ai/ai-red-teaming/probe/target/index/amazon-bedrock-agents.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.