Skip to main content
Available on the Enterprise plan. OpenAI model routing must be enabled for your organization. Contact sales to learn more.
AWS Bedrock (OpenAI API) is supported only on AWS EC2 Runners.
Use AWS Bedrock’s OpenAI-compatible API when Codex Agent should run OpenAI models through Bedrock Runtime with your organization’s Bedrock API key. AWS Bedrock (OpenAI API) is separate from AWS Bedrock Mantle and the deprecated AWS Bedrock integration for Anthropic models. To track spend on your BYOK model usage, see the AI cost usage API.

​
Prerequisites

  • Your organization has OpenAI model routing enabled.
  • You have an AWS EC2 runner configured in Ona.
  • Your AWS account has access to the selected OpenAI models in Bedrock.
  • You have a Bedrock API key. See Generate an Amazon Bedrock API key.
  • For GPT-6 Sol and Luna, the environment has an updated Codex Agent with Bedrock routing for these models.

​
Understand endpoints and model profiles

The endpoint hostname identifies the AWS region that receives the request:
Without an explicit model mapping, Ona uses the corresponding global inference-profile identifier for GPT-6 Sol, GPT-6 Luna, and GPT-5.6 models:
The global. prefix is part of the model identifier. It does not replace the region in the hostname. AWS routes global inference-profile requests across supported commercial AWS regions. An explicit model mapping can select us.openai.gpt-6-sol or us.openai.gpt-6-luna for US inference instead. Runtime mappings must use the exact global. or us. identifier for the selected model; custom suffixes are not supported. GPT-6 Sol and Luna support Standard speed and Low through Max reasoning on Bedrock. Fast speed and Ultra reasoning are unavailable.

​
Add the integration with the UI

  1. Go to the Runners settings page.
  2. Select the AWS EC2 runner where you want to configure Bedrock.
  3. Scroll to LLM Providers.
  4. Click Configure.
  5. Select AWS Bedrock (OpenAI API).
  6. Enter the AWS region for the Bedrock Runtime endpoint, such as us-east-1.
  7. Paste your Bedrock API key into API Key.
  8. Click Create Integration.
Ona generates the regional endpoint and sends the Bedrock API key as an HTTP bearer token. The API key is encrypted at rest and is not exposed inside environments. If your organization uses a custom dashboard domain, open the runner settings on that domain instead of app.ona.com.

​
Add the integration with the CLI

To verify the integration:

​
Verify the integration

  1. Create a new environment with the configured AWS EC2 runner.
  2. Start Codex Agent and select a supported model, such as GPT-6 Sol or GPT-6 Luna.
  3. Confirm that the agent can answer a simple code question.
  4. Check your AWS Bedrock usage to confirm that requests use the selected OpenAI model and inference profile.

​
FAQ

The regional hostname selects the Bedrock Runtime API endpoint that receives the request. The global. model prefix tells AWS to use global cross-region inference for that model.
No. This Ona integration uses Bedrock API-key bearer authentication. The deprecated Anthropic integration uses runner IAM credentials with the native Bedrock API and is configured separately.

​
Troubleshooting

This option is available only on AWS EC2 runners when OpenAI model routing is enabled for your organization. It is not shown on GCP runners.
Confirm that the key is an active Bedrock API key and that its permissions allow access to the selected OpenAI model. Do not paste AWS access-key credentials into the API key field.
Confirm that the configured AWS region supports the selected OpenAI inference profile and that the Bedrock API key has permission to use it. For GPT-6 Sol and Luna, confirm that the environment’s installed Codex Agent includes Bedrock routing for these models. Check the AWS Bedrock service status if requests continue to fail.