Add comprehensive AWS Bedrock environment variable support for Anthropic Claude models

[Copilot]

Problem

The current Anthropic Bedrock provider implementation had minimal environment variable support, only relying on AWS SDK's automatic credential discovery without proper validation or configuration options. This made it difficult for users to:

• Configure specific AWS regions for Bedrock access
• Use different authentication methods (API keys, profiles, temporary credentials)
• Debug connection issues due to missing credentials
• Access advanced Bedrock features like prompt caching controls

Solution

This PR implements comprehensive AWS Bedrock configuration support that aligns with Anthropic's official documentation and AWS best practices:

Required Environment Variables

• AWS_REGION: Now validated as required since Bedrock is region-specific
• Authentication (one method required):
  • AWS_ACCESS_KEY_ID + AWS_SECRET_ACCESS_KEY for standard credentials
  • AWS_SESSION_TOKEN for temporary/assumed role credentials
  • AWS_PROFILE for profile-based authentication
  • AWS_BEARER_TOKEN_BEDROCK for simplified Bedrock API key authentication

Optional Advanced Variables

• ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION: Override region for small/fast models
• DISABLE_PROMPT_CACHING: Control prompt caching behavior
• ANTHROPIC_MODEL: Override default model selection

Changes Made

1. Enhanced env.ts: Added comprehensive validation and error handling for all AWS Bedrock environment variables with clear error messages
2. Updated llmsdata.ts: Documented all supported environment variables for the CLI configure command
3. Improved documentation: Updated anthropic-bedrock.mdx with complete setup instructions and configuration examples
4. Added debugging: Comprehensive logging for troubleshooting configuration issues

Example Usage

# Required setup
export AWS_REGION="us-east-1"
export AWS_ACCESS_KEY_ID="AKIA..."
export AWS_SECRET_ACCESS_KEY="..."

# Optional advanced configuration
export ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION="us-west-2"
export DISABLE_PROMPT_CACHING="1"

# Now works with proper validation
genaiscript run my-script --model anthropic_bedrock:anthropic.claude-3-sonnet-20240229-v1:0

Validation

• ✅ All changes build successfully
• ✅ No security vulnerabilities introduced (CodeQL scan passed)
• ✅ Comprehensive error messages for common misconfigurations
• ✅ Backward compatible with existing AWS SDK credential discovery
• ✅ Follows existing code patterns and conventions

This implementation ensures users have full control over their Bedrock configuration while maintaining the simplicity of the AWS SDK's automatic discovery when appropriate.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• cdn.sheetjs.com
  • Triggering command: node /home/REDACTED/.local/share/pnpm/.tools/pnpm/10.12.3/bin/pnpm install (dns block)
• esm.ubuntu.com
  • Triggering command: /usr/lib/apt/methods/https (dns block)
• example.com
• https://api.github.com/markdown
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/branches
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/contents/README.md
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/contents/packages%2Fcore%2Fsrc
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/git/blobs
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/git/ref/heads%2Ftest-ignore
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/issues
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/labels
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/languages
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/pulls
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 1) (http block)
• https://api.github.com/repos/microsoft/genaiscript/pulls/999999
  • Triggering command: node (vitest 2) (http block)
  • Triggering command: node (vitest 3) (http block)
• https://api.github.com/test
  • Triggering command: node (vitest 3) (http block)
  • Triggering command: node (vitest 2) (http block)
• microsoft.github.io
  • Triggering command: node (vitest 3) (dns block)
  • Triggering command: node (vitest 2) (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

---

💬 Share your feedback on Copilot coding agent for the chance to win a $200 gift card! Click here to start the survey.

[github-actions]

Warning

LLM error (403): error

AI-generated content by docs may be incorrect.