{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":[]},"type":"markdown"},"seo":{"title":"AWS Bedrock Integration","description":"Control the power of AI Agents in runtime.","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"aws-bedrock-integration","__idx":0},"children":["AWS Bedrock Integration"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Connect your AWS Bedrock environment to Capsule Security for complete visibility into your AI agents, flows, knowledge bases, guardrails, and runtime activity."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"overview","__idx":1},"children":["Overview"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This integration uses an IAM role to sync into your Bedrock resources and capture runtime telemetry:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Category"},"children":["Category"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"What Gets Captured"},"children":["What Gets Captured"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Agents"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Bedrock Agents and AgentCore agents with configuration and metadata"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Action Groups"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Lambda functions and OpenAPI schemas attached to agents"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Knowledge Bases"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Vector stores, data sources, and chunking configurations"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Guardrails"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Content filters, denied topics, and PII handling policies"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Flows"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Prompt flows with node configurations and connections"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Runtime Activity"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Agent invocations, traces, tool calls, and session history"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"prerequisites","__idx":2},"children":["Prerequisites"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you begin, ensure you have:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AWS account"]}," with Bedrock Agents or AgentCore deployed"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["IAM permissions"]}," to deploy CloudFormation stacks (or ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["AdministratorAccess"]},")"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["CloudTrail"]}," enabled in your account (for runtime activity capture)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Access to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Capsule Security"]}," portal"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-1-launch-the-cloudformation-stack","__idx":3},"children":["Step 1: Launch the CloudFormation Stack"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Deploy the Capsule IAM role using the provided CloudFormation template."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"steps","__idx":4},"children":["Steps"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Log in to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Capsule Security"]}," portal"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Integrations"]}," in the left sidebar"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Find the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AWS Bedrock"]}," card and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Set up Integration"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Open CloudFormation"]}]}]},{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/capsule-portal-integration-installation.92c7ecd9d25912641c8a5a803cbe26f3449ea791a14c27c6513382317f0c6fb7.03fbc795.png","alt":"Capsule Portal integration card of AWS Bedrock installation"},"children":[]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":5},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You'll be redirected to the AWS CloudFormation console"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Review the stack details:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Stack name"]},": ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["CapsuleSecurityBedrockIntegration"]}," (or customize)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Capabilities"]},": Acknowledge IAM resource creation"]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create stack"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"what-gets-deployed","__idx":5},"children":["What gets deployed"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Resource"},"children":["Resource"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Purpose"},"children":["Purpose"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["IAM Role"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Cross-account role assumed by Capsule for read-only access"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["IAM Policy"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Permissions scoped to Bedrock, CloudTrail, and CloudWatch"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Trust Policy"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Restricts assumption to Capsule's AWS account with external ID"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-2-copy-the-role-arn","__idx":6},"children":["Step 2: Copy the Role ARN"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Once the stack completes, retrieve the IAM role ARN from the Outputs tab."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"steps-1","__idx":7},"children":["Steps"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Wait for the stack status to show ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["CREATE_COMPLETE"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Outputs"]}," tab"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Copy the value for ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["RoleArn"]}]}]},{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/capsule-portal-integration-cf-post-install.0aafc185f796aba64fa437393e5d0ebf02b6cce22b16441cd23b3e35160994c8.03fbc795.png","alt":"CloudFormation post install ARN selection location"},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-3-complete-the-integration-in-capsule","__idx":8},"children":["Step 3: Complete the Integration in Capsule"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Provide the Role ARN to Capsule to establish the connection."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"steps-2","__idx":9},"children":["Steps"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Return to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Capsule Security"]}," portal"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Paste the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Role ARN"]}," into the input field"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Capsule validates the role and its ability to communite with your AWS Account"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"after-setup","__idx":10},"children":["After setup"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["First sync may take several minutes"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["View synced agents in ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Inventory → Agents"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["View runtime activity in ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Observability"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"what-gets-captured","__idx":11},"children":["What Gets Captured"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"bedrock-agents","__idx":12},"children":["Bedrock Agents"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Entity Type"},"children":["Entity Type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Category"},"children":["Category"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Agents"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Model Agent"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Agent configuration, foundation model, instructions"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Agent Aliases"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Version"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Deployed versions and routing configuration"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Action Groups"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Tool"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Lambda functions and API schemas"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Knowledge Bases"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Data Source"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Vector stores with embedding models and data sources"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Guardrails"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Guardrail"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Content filters, word blocklists, PII policies"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Flows"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Flow"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Prompt flow definitions with node graphs"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Prompts"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Prompt"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Managed prompts with versions"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"bedrock-agentcore","__idx":13},"children":["Bedrock AgentCore"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Entity Type"},"children":["Entity Type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Category"},"children":["Category"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["AgentCore Runtimes"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Model Agent"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Agent runtime configurations"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Tools"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Tool"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Registered tools and function definitions"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Memory"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Memory"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Session and long-term memory configurations"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Identity"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Identity"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Workload identity configurations"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"runtime-activity","__idx":14},"children":["Runtime Activity"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When CloudTrail and model invocation logging are enabled:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Agent invocations"]}," — Input prompts and final responses"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Tool invocations"]}," — Action group calls with inputs and outputs"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Session history"]}," — Multi-turn conversation threads"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"enabling-runtime-observability","__idx":15},"children":["Enabling Runtime Observability"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For full runtime visibility, ensure model invocation logging is enabled."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"steps-3","__idx":16},"children":["Steps"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Amazon Bedrock"]}," console"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Settings → Model invocation logging"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enable logging and configure your destination (S3 or CloudWatch)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["For AgentCore, ensure OpenTelemetry export is configured"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"updating-the-cloudformation-stack","__idx":17},"children":["Updating the CloudFormation Stack"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["To update the CloudFormation Stack, following these steps:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Head over to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["CloudFormation / Stacks"]}," in your AWS Account"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select our integration stack (named ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["CapsuleSecurityBedrockIntegration"]}," by default)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Update stack → Create a change set"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Standard change set → Replace existing template"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Provide the CloudFormation Template URL (default: ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["https://capsule-security-us-east-1-public-demo.s3.us-east-1.amazonaws.com/cf-capsule-security-bedrock-integration.yaml"]},")"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click upcoming ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Next"]},"s, review the terms and agree to them"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["This will create a ChangeSet, review the changes and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Execute change set"]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"troubleshooting","__idx":18},"children":["Troubleshooting"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"stack-creation-failed","__idx":19},"children":["Stack creation failed"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Check the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Events"]}," tab for specific error messages"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Verify you have permissions to create IAM roles"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Ensure the stack name doesn't already exist"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"role-validation-failed-in-capsule","__idx":20},"children":["Role validation failed in Capsule"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Confirm the stack status is CREATE_COMPLETE"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Verify you copied the full ARN from the Outputs tab"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Check that the role or its permission hasn't been modified or deleted"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"no-agents-appearing","__idx":21},"children":["No agents appearing"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Verify Bedrock agents exist in the connected AWS account"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Check the agent regions match your Capsule environment"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Allow several minutes for the initial sync to complete"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"no-runtime-activity-appearing","__idx":22},"children":["No runtime activity appearing"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Confirm CloudTrail is enabled in your account"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Verify model invocation logging is enabled in Bedrock settings"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Check that agents have been invoked since the integration was connected"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"supported-regions","__idx":23},"children":["Supported Regions"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The integration supports all AWS regions where Bedrock is available. Each Capsule environment syncs from a specific AWS region based on your deployment."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"support","__idx":24},"children":["Support"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For help with this integration, contact support."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For AWS Bedrock issues:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://docs.aws.amazon.com/bedrock/"},"children":["Amazon Bedrock Documentation"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://docs.aws.amazon.com/bedrock/latest/userguide/agents.html"},"children":["Bedrock Agents User Guide"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"https://aws.amazon.com/support/"},"children":["AWS Support"]}]}]}]},"headings":[{"value":"AWS Bedrock Integration","id":"aws-bedrock-integration","depth":1},{"value":"Overview","id":"overview","depth":2},{"value":"Prerequisites","id":"prerequisites","depth":2},{"value":"Step 1: Launch the CloudFormation Stack","id":"step-1-launch-the-cloudformation-stack","depth":2},{"value":"Steps","id":"steps","depth":3},{"value":"What gets deployed","id":"what-gets-deployed","depth":3},{"value":"Step 2: Copy the Role ARN","id":"step-2-copy-the-role-arn","depth":2},{"value":"Steps","id":"steps-1","depth":3},{"value":"Step 3: Complete the Integration in Capsule","id":"step-3-complete-the-integration-in-capsule","depth":2},{"value":"Steps","id":"steps-2","depth":3},{"value":"After setup","id":"after-setup","depth":3},{"value":"What Gets Captured","id":"what-gets-captured","depth":2},{"value":"Bedrock Agents","id":"bedrock-agents","depth":3},{"value":"Bedrock AgentCore","id":"bedrock-agentcore","depth":3},{"value":"Runtime Activity","id":"runtime-activity","depth":3},{"value":"Enabling Runtime Observability","id":"enabling-runtime-observability","depth":2},{"value":"Steps","id":"steps-3","depth":3},{"value":"Updating the CloudFormation Stack","id":"updating-the-cloudformation-stack","depth":2},{"value":"Troubleshooting","id":"troubleshooting","depth":2},{"value":"Stack creation failed","id":"stack-creation-failed","depth":3},{"value":"Role validation failed in Capsule","id":"role-validation-failed-in-capsule","depth":3},{"value":"No agents appearing","id":"no-agents-appearing","depth":3},{"value":"No runtime activity appearing","id":"no-runtime-activity-appearing","depth":3},{"value":"Supported Regions","id":"supported-regions","depth":2},{"value":"Support","id":"support","depth":2}],"frontmatter":{"sidebar":"../sidebars.yaml","seo":{"title":"AWS Bedrock Integration"}},"lastModified":"2026-01-01T11:00:06.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/guides/aws-bedrock-integration","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}