Set Up Stakpak with Amazon Bedrock

Use Amazon Bedrock as your LLM provider for Stakpak

Prerequisites

1. Install Stakpak

2. AWS Account with Amazon Bedrock access enabled in your target region.

3. AWS Credentials Configured locally via ~/.aws/credentials or ~/.aws/config (SSO, IAM user, or instance profile)

4. Amazon Bedrock Model Access: You must request model access in the AWS Console for the models you want to use (e.g., Anthropic Claude)

Step 1: Install Stakpak

curl -sSL https://stakpak.dev/install.sh | sh

Full installation guide: Install Stakpak

---

Step 2: Configure AWS Credentials

Stakpak's Bedrock provider uses your local AWS credentials. Make sure one of these is set up:

• AWS Named Profile (Recommended)

• IAM User Access Keys

• Environment Variables

And you need to have these Required IAM Permissions

AWS Named Profile (Recommended)

If you already use aws configure or AWS SSO, you likely have profiles in ~/.aws/config:

# ~/.aws/config
[profile my-bedrock-profile]
region = us-east-1
sso_start_url = https://my-org.awsapps.com/start
sso_region = us-east-1
sso_account_id = 123456789012
sso_role_name = PowerUserAccess

Log in to refresh your session:

aws sso login --profile my-bedrock-profile

IAM User Access Keys

# ~/.aws/credentials
[default]
aws_access_key_id = AKIAIOSFODNN7EXAMPLE
aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY

Environment Variables

export AWS_ACCESS_KEY_ID="AKIAIOSFODNN7EXAMPLE"
export AWS_SECRET_ACCESS_KEY="wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY"
export AWS_REGION="us-east-1"

Required IAM Permissions

Your IAM identity needs the following permissions for Bedrock:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "bedrock:InvokeModel",
        "bedrock:InvokeModelWithResponseStream"
      ],
      "Resource": "arn:aws:bedrock:*::foundation-model/*"
    }
  ]
}

Tip: For tighter security, scope the Resource to the specific model(s) you'll use, e.g.: arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-sonnet-4-20250514-v1:0

---

Step 3: Enable Model Access in AWS Console

Before Stakpak can call any model, you must request access in the Bedrock console:

1. Open the Amazon Bedrock Console

2. Navigate to Model access in the left sidebar

3. Click Manage model access

4. Select the models you want (e.g., Anthropic -> Claude 4 Sonnet)

5. Submit the request (most models are approved instantly)

---

Step 4: Authenticate Stakpak with Bedrock

stakpak auth login --provider amazon-bedrock --profile bedrock --region us-east-1

Don't forget to choose the same region as where your bedrock model is enabled

---

References

• Install Stakpak

• Configure Stakpak

• Profiles

• Configuration and credential file settings in the AWS CLI

• Amazon Bedrock User Guide

• Bedrock Model Access