OptionalapplicationOptionalauthorizationBROWSER ONLY.
Providing this value will set an "Authorization" request header value on the GET request.
OptionalawsOptionalawsAn alternative to awsContainerAuthorizationTokenFile, this is the token value itself.
For browser environments, use instead authorizationToken.
OptionalawsWill be read on each credentials request to add an Authorization request header value.
Not supported in browsers.
OptionalawsIf this value is provided, it will be used as-is.
For browser environments, use instead credentialsFullUri.
OptionalawsIf this value is provided instead of the full URI, it will be appended to the default link local host of 169.254.170.2.
Not supported in browsers.
OptionalawsOptionalawsOptionalcacheOptionalcallbackOptionalcallbacksOptional InternalclientSTSClientConfig or SSOClientConfig to be used for creating inner client for auth operations.
Optional InternalclientOptionalconfigThe path at which to locate the ini config file. Defaults to the value of
the AWS_CONFIG_FILE environment variable (if defined) or
~/.aws/config otherwise.
OptionalcredentialsAWS Credentials.
If no credentials are provided, the default credentials from @aws-sdk/credential-provider-node will be used.
OptionalcredentialsBROWSER ONLY.
In browsers, a relative URI is not allowed, and a full URI must be provided. HTTPS is required.
This value is required for the browser environment.
OptionaldisableWhether to disable streaming.
If streaming is bypassed, then stream() will defer to
invoke().
Optionalec2Only used in the IMDS credential provider.
OptionalendpointOverride the default endpoint hostname.
OptionalendpointOptionalfetchA custom fetch function for low-level access to AWS API. Defaults to fetch().
Optionalinit: RequestInitOptionalinit: RequestInitOptionalfilepathThe path at which to locate the ini credentials file. Defaults to the
value of the AWS_SHARED_CREDENTIALS_FILE environment variable (if
defined) or ~/.aws/credentials otherwise.
OptionalguardrailRequired when Guardrail is in use.
OptionalguardrailIdentifier for the guardrail configuration.
OptionalguardrailVersion for the guardrail configuration.
OptionalignoreWhen true, always reload credentials from the file system instead of using cached values. This is useful when you need to detect changes to the credentials file.
OptionalloggerFor credential resolution trace logging.
OptionalmaxThe maximum number of concurrent calls that can be made.
Defaults to Infinity, which means no limit.
OptionalmaxThe maximum number of retries that can be made for a single call, with an exponential backoff between each attempt. Defaults to 6.
OptionalmaxMax tokens.
OptionalmetadataOptionalmfaA function that returns a promise fulfilled with an MFA token code for
the provided MFA Serial code. If a profile requires an MFA code and
mfaCodeProvider is not a valid function, the credential provider
promise will be rejected.
The serial code of the MFA device specified.
OptionalmodelModel to use. For example, "amazon.titan-tg1-large", this is equivalent to the modelId property in the list-foundation-models api.
OptionalmodelAdditional kwargs to pass to the model.
OptionalonCustom handler to handle failed attempts. Takes the originally thrown error object as input, and should itself throw an error if the input error is not retryable.
Optional InternalparentPresent if the credential provider was created by calling the defaultCredentialProvider in a client's middleware, having access to the client's config.
The region of that parent or outer client is important because an inner client used by the credential provider may need to match its default partition or region with that of the outer client.
OptionalprofileThe configuration profile to use.
OptionalregionThe AWS region e.g. us-west-2.
Fallback to AWS_DEFAULT_REGION env variable or region specified in ~/.aws/config in case it is not provided here.
OptionalroleA function that assumes a role and returns a promise fulfilled with credentials for the assumed role.
The credentials with which to assume a role.
OptionalroleA function that assumes a role with web identity and returns a promise fulfilled with credentials for the assumed role.
OptionalroleThe IAM session name used to distinguish sessions.
OptionalssoThe ID of the AWS account to use for temporary credentials.
OptionalssoOptionalssoThe AWS region to use for temporary credentials.
OptionalssoThe name of the AWS role to assume.
OptionalssoSSO session identifier. Presence implies usage of the SSOTokenProvider.
OptionalssoThe URL to the AWS SSO service.
OptionalstopOptional additional stop sequences to pass to the model. Currently only supported for Anthropic and AI21.
OptionalstreamingWhether or not to stream responses
OptionaltagsOptionaltemperatureTemperature.
OptionaltimeoutDefault is 1000ms. Time in milliseconds to spend waiting between retry attempts.
OptionaltraceTrace settings for the Bedrock Guardrails.
OptionalverboseOptionalwebFile location of where the OIDC token is stored.
Optional URL Encoded overide for URL model parameter in fetch. Necessary for invoking an Application Inference Profile. For example, "arn%3Aaws%3Abedrock%3Aus-east-1%3A1234567890%3Aapplication-inference-profile%2Fabcdefghi", will override this.model in final /invoke URL call. Must still provide
modelas normal modelId to benefit from all the metadata.