Skip to main content
Available on the Enterprise plan. Contact sales to learn more.
This feature is only supported in AWS EC2 Runners.
Ona Agent supports Anthropic Claude models through AWS Bedrock Runtime. This page covers the IAM-based AWS Bedrock Runtime integration that uses bedrock://<model-id> endpoints. For OpenAI model routing through AWS Bedrock Mantle, see AWS Bedrock Mantle.

Prerequisites

  • You must have an AWS account with Bedrock enabled and model access approved.
  • You must have an Ona enterprise license.
  • Your enterprise runner must be deployed in the same AWS account and have IAM permissions to invoke Bedrock.

Network access (VPC endpoints)

If your runner operates in a private subnet without internet egress, you need a VPC endpoint for the Bedrock Runtime service. Ona only calls the Bedrock Runtime API (bedrock-runtime). No other Bedrock endpoints are required. Create an interface VPC endpoint for com.amazonaws.<region>.bedrock-runtime in the VPC where your runner is deployed. See the AWS documentation on Bedrock VPC endpoints for setup instructions.

Set up AWS permissions and model access

  1. Go to the AWS Bedrock console
  2. Open Model access and request access to the Anthropic Claude model(s) you plan to use, such as Opus 4.8 or Sonnet 5.
  3. Important for Anthropic models: First-time customers must submit use case details before invoking an Anthropic model. This is required once per account or once at the organization’s management account. You can submit use case details by:
    • Selecting an Anthropic model from the model catalog in the Amazon Bedrock console, or
    • Calling the PutUseCaseForModelAccess API command
    Access to the model is granted immediately after use case details are successfully submitted. If you submit the form at the root account, it will be inherited by other accounts in the same AWS Organizations. Learn more in the AWS Bedrock Model Access documentation.
  4. Wait for approval

Configure the Bedrock endpoint

Endpoint format

Find model IDs in the AWS Bedrock model names. Use Claude Opus 4.8, Sonnet 5, or Sonnet 4.6 model identifiers for your region.

Add the configuration to Ona

You can configure an AWS Bedrock Runtime integration in two ways:
  • Ona CLI
  • Through the UI

Option 1: Ona CLI

Option 2: Through the UI

  1. Go to the Runners settings page
  2. Select an enterprise runner where you want to enable LLM integration
  3. Scroll down to the “LLM Providers” section
  4. Click the Configure button
  5. In “Bedrock Model ID”, enter the model ID for your region (for example, global.anthropic.claude-sonnet-5). Tip: Verify the identifier for your region in the AWS Bedrock model IDs documentation.
  6. “API Key”: Not required for Bedrock (AWS credentials are used).
  7. If a model preset selector is shown, choose “Claude Sonnet 5” or another supported Claude model.
  8. Click Create Integration
Completed Bedrock LLM integration form with model ID and configuration saved

Verify the integration

  1. Create a new environment with the configured runner
  2. Open Ona Agent and start a session
  3. If Ona Agent responds, the integration is working. Test with a simple code generation request

Supported models

Ona supports Claude model presets including Claude Opus 4.8 and Claude Sonnet 5 on AWS Bedrock.

Identifying available models

There are two ways to identify models: foundation models and inference profiles. Inference profiles are resources that define a model and one or more regions for routing requests, enabling cross-region inference, usage tracking, and cost monitoring. Availability varies by region. Some regions only support foundation models, while others support both foundation models and inference profiles. Check model availability per region in the AWS documentation. You can check availability using AWS CLI commands from your environment, assuming you have proper authentication and region environment variables set:

Testing model connectivity

To run a simple smoke test and verify a model works:
If the smoke test succeeds, the model should work with Ona Agent.

Getting help

If you encounter issues:
  1. Check Ona Agent logs for detailed error messages
  2. Verify AWS quotas and Bedrock model access
  3. Contact your account manager for additional support

Next steps

Troubleshooting

Use a model ID that is available in your runner’s region. For regionalized models, use the correct prefix, such as us.anthropic.*.
Ensure the runner role has bedrock:InvokeModel and bedrock:InvokeModelWithResponseStream. Confirm model access is approved in the Bedrock console.
Use bedrock://<model-id> and include the full version, such as ...-v1:0.
Lower the maximum tokens with gitpod runner config llm-integration set-max-tokens .... Review Bedrock service quotas and request increases if needed.