Overview

Sixth offers the option of utilizing AWS credentials or AWS profiles to access AWS Bedrock services. SSO/Federated roles are suggested over Legacy IAM configuration; this guide describes how to configure your environment so that Sixth uses SSO roles for authentication.

Configuration Steps

  1. Install the latest version of AWS CLI
    • Follow the AWS docs to install your OS-specific version of AWS CLI
  2. Configure IAM authentication with the AWS CLI
    • If you do not already have AWS access through the IAM Identity Center, follow the IAM User Guide to set up IAM users and roles. Ensure you have a PowerUserAccess role.
    • If you have access to AWS through your employer, open your AWS access portal and find the appropriate account. Ensure you have PowerUserAccess permissions.
    • Open the Access keys link and note the SSO start URL and SSO region, which are needed in the next step
  3. Continue configuring your profile using the aws configure sso CLI wizard
    • Once configured, use the following command to authenticate the AWS CLI: aws sso login --profile <AWS-profile-name>
    • Note which profile name you attach to your AWS account, this is needed to configure Sixth in the following steps
  4. If you haven’t already done so, install VSCode and the Sixth extension. Consult the Getting Started page for guidance.
  5. Open the Sixth extension, then click on the settings button ⚙️ to select your API Provider.
    • From the API Provider dropdown, select AWS Bedrock
    • Select the AWS Profile radio button, then enter the AWS Profile Name from step 3
    • Select your AWS Region from the dropdown menu
    • Selecting the cross-region inference checkbox is required for some models
AWS Bedrock configuration in Sixth settings showing profile authentication setup