Connect to Amazon Bedrock

Sign in to the AWS Management Console and open the Amazon Bedrock console at https://console.aws.amazon.com/bedrock/.

In the left navigation pane, choose Model access.

Enable the models that you want to use. For more information, see Manage access to Amazon Bedrock foundation models.

Sign in to the IAM console with a user that has permissions to create IAM roles. We recommend using the administrative user created in Create an administrative user for managing AWS resources.

In the navigation pane of the console, choose Roles and then choose Create role.

In Trusted entity type, choose Custom trust policy.

Replace the default policy with the following policy to allow App Studio applications to assume this role in your account.

You must replace 111122223333 with the AWS account number of the account used to set up the App Studio instance.

{ 
    "Version": "2012-10-17",
    "Statement": [
        { 
            "Effect": "Allow",
            "Principal": { 
                "AWS": "arn:aws:iam::111122223333:root"
            }, 
            "Action": "sts:AssumeRole",
            "Condition": {
                "StringEquals": {
                        "aws:PrincipalTag/IsAppStudioAccessRole": "true"
                }
            }
        } 
    ]
}

Choose Next.

In Add permissions, search for and select the policies that grant the appropriate permissions for the role. Choosing the + next to a policy will expand the policy to show the permissions granted by it and choosing the checkbox selects the policy. For Amazon Bedrock, you may consider adding the AmazonBedrockFullAccess policy, which grants full access to Amazon Bedrock.

For more information about using IAM policies with Amazon Bedrock, including a list of managed policies and their descriptions, see Identity and Access Management for Amazon Bedrock in the Amazon Bedrock User Guide.

Choose Next.

In Role details, provide a name and description.

In Step 3: Add tags, choose Add new tag to add the following tag to provide App Studio access:

Choose Create role and make note of the generated Amazon Resource Name (ARN), you will need it when creating the Amazon Bedrock connector in App Studio in the next step.

Navigate to App Studio.

In the left-side navigation pane, choose Connectors in the Manage section. You will be taken to a page displaying a list of existing connectors with some details about each.

Choose + Create connector.

Choose AWS Services from the list of connector types.

Configure your connector by filling out the following fields:

Choose Create.

The newly created connector will appear in the Connectors list.