Available on the Enterprise plan. Contact sales to learn more.
This feature is only supported in AWS EC2 Runners.
bedrock://<model-id> endpoints. For OpenAI model routing through AWS Bedrock Mantle, see AWS Bedrock Mantle.
Prerequisites
- You must have an AWS account with Bedrock enabled and model access approved.
- You must have an Ona enterprise license.
- Your enterprise runner must be deployed in the same AWS account and have IAM permissions to invoke Bedrock.
Network access (VPC endpoints)
If your runner operates in a private subnet without internet egress, you need a VPC endpoint for the Bedrock Runtime service. Ona only calls the Bedrock Runtime API (bedrock-runtime). No other Bedrock endpoints are required.
Create an interface VPC endpoint for com.amazonaws.<region>.bedrock-runtime in the VPC where your runner is deployed. See the AWS documentation on Bedrock VPC endpoints for setup instructions.
Set up AWS permissions and model access
- Go to the AWS Bedrock console
- Open Model access and request access to the Anthropic Claude model(s) you plan to use, such as Opus 4.8 or Sonnet 5.
-
Important for Anthropic models: First-time customers must submit use case details before invoking an Anthropic model. This is required once per account or once at the organization’s management account. You can submit use case details by:
- Selecting an Anthropic model from the model catalog in the Amazon Bedrock console, or
- Calling the
PutUseCaseForModelAccessAPI command
- Wait for approval
Configure the Bedrock endpoint
Endpoint format
Add the configuration to Ona
You can configure an AWS Bedrock Runtime integration in two ways:- Ona CLI
- Through the UI
Option 1: Ona CLI
Option 2: Through the UI
- Go to the Runners settings page
- Select an enterprise runner where you want to enable LLM integration
- Scroll down to the “LLM Providers” section
- Click the Configure button
- In “Bedrock Model ID”, enter the model ID for your region (for example,
global.anthropic.claude-sonnet-5). Tip: Verify the identifier for your region in the AWS Bedrock model IDs documentation. - “API Key”: Not required for Bedrock (AWS credentials are used).
- If a model preset selector is shown, choose “Claude Sonnet 5” or another supported Claude model.
- Click Create Integration

Verify the integration
- Create a new environment with the configured runner
- Open Ona Agent and start a session
- If Ona Agent responds, the integration is working. Test with a simple code generation request
Supported models
Ona supports Claude model presets including Claude Opus 4.8 and Claude Sonnet 5 on AWS Bedrock.Identifying available models
There are two ways to identify models: foundation models and inference profiles. Inference profiles are resources that define a model and one or more regions for routing requests, enabling cross-region inference, usage tracking, and cost monitoring. Availability varies by region. Some regions only support foundation models, while others support both foundation models and inference profiles. Check model availability per region in the AWS documentation. You can check availability using AWS CLI commands from your environment, assuming you have proper authentication and region environment variables set:Testing model connectivity
To run a simple smoke test and verify a model works:Getting help
If you encounter issues:- Check Ona Agent logs for detailed error messages
- Verify AWS quotas and Bedrock model access
- Contact your account manager for additional support
Next steps
- Review the AWS Bedrock User Guide
- See Anthropic Claude on Bedrock
- Use AWS Bedrock Mantle for the documented OpenAI routing flow
- Monitor usage and performance in CloudWatch
Troubleshooting
Model not available in region
Model not available in region
Use a model ID that is available in your runner’s region. For regionalized models, use the correct prefix, such as
us.anthropic.*.AccessDeniedException when invoking model
AccessDeniedException when invoking model
Ensure the runner role has
bedrock:InvokeModel and bedrock:InvokeModelWithResponseStream. Confirm model access is approved in the Bedrock console.Invalid model URI format
Invalid model URI format
Use
bedrock://<model-id> and include the full version, such as ...-v1:0.Throttling or token limit errors
Throttling or token limit errors
Lower the maximum tokens with
gitpod runner config llm-integration set-max-tokens .... Review Bedrock service quotas and request increases if needed.