continue icon indicating copy to clipboard operation
continue copied to clipboard

Support all credential sources for AWS Bedrock

Open maxbrunet opened this issue 1 year ago • 0 comments

Validations

  • [X] I believe this is a way to improve. I'll try to join the Continue Discord for questions
  • [X] I'm not able to find an open issue that requests the same enhancement

Problem

This custom code only supports aws_access_key_id/aws_secret_access_key/aws_session_token at a hard coded location

https://github.com/continuedev/continue/blob/d40b4c5d4bf593bc81f0b909ccae9837e8785bfb/core/llm/llms/Bedrock.ts#L90-L115 https://github.com/continuedev/continue/blob/d40b4c5d4bf593bc81f0b909ccae9837e8785bfb/core/llm/llms/Bedrock.ts#L145-L148

Personally, I use another location and use credential_process with aws-vault to avoid storing credentials in plain text, or AWS SSO. And of course, they are many more ways to authenticate.

Solution

Continue could leverage the @aws-sdk/credential-provider-node package, as well as @aws-sdk/client-sts for temporary credentials instead of sending long-term credentials with every request

maxbrunet avatar Apr 15 '24 05:04 maxbrunet