wehub-resource-sync
0d3cb498a3
CI / Shell Format Check (push) Has been cancelled
CI / Check Ruby (3.4) (push) Has been cancelled
CI / CI Config (push) Has been cancelled
CI / Test on Node ${{ matrix.node }} and ${{ matrix.os }}${{ matrix.shard && format(' (shard {0}/3)', matrix.shard) || '' }} (push) Has been cancelled
CI / Build on Node ${{ matrix.node }} (push) Has been cancelled
CI / Style Check (push) Has been cancelled
CI / Generate Assets (push) Has been cancelled
CI / Check Python (3.14) (push) Has been cancelled
CI / Check Python (3.9) (push) Has been cancelled
CI / Build Docs (push) Has been cancelled
CI / Code Scan Action (push) Has been cancelled
CI / Site tests (push) Has been cancelled
CI / webui tests (push) Has been cancelled
CI / Run Integration Tests (push) Has been cancelled
CI / Run Smoke Tests (push) Has been cancelled
CI / Go Tests (push) Has been cancelled
CI / Share Test (push) Has been cancelled
CI / Redteam (Production API) (push) Has been cancelled
CI / Redteam (Staging API) (push) Has been cancelled
CI / GitHub Actions Lint (push) Has been cancelled
CI / Check Ruby (3.0) (push) Has been cancelled
release-please / release-please (push) Has been cancelled
release-please / build (push) Has been cancelled
release-please / publish-npm (push) Has been cancelled
release-please / publish-npm-backfill (push) Has been cancelled
release-please / docker (push) Has been cancelled
release-please / publish-code-scan-action (push) Has been cancelled
release-please / attest-code-scan-action (push) Has been cancelled
Deploy local.promptfoo.app / Deploy to Cloudflare Pages (push) Has been cancelled
Test and Publish Multi-arch Docker Image / test (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-amd64 platform:linux/amd64 runner:ubuntu-latest]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / build-docker-and-push-digests (map[digest-suffix:linux-arm64 platform:linux/arm64 runner:ubuntu-24.04-arm]) (push) Has been cancelled
Test and Publish Multi-arch Docker Image / merge-docker-digests (push) Has been cancelled
Test and Publish Multi-arch Docker Image / Attest Multi-arch Image (push) Has been cancelled
Validate Renovate Config / Validate Renovate Configuration (push) Has been cancelled
60 lines
2.2 KiB
Markdown
60 lines
2.2 KiB
Markdown
# openai-codex-sdk/bedrock (Codex SDK on Amazon Bedrock)
|
|
|
|
Runs OpenAI's Codex coding agent against OpenAI frontier models hosted on **Amazon Bedrock**
|
|
(`openai.gpt-5.5` / `openai.gpt-5.4`) instead of the OpenAI Platform.
|
|
|
|
You can run this example with:
|
|
|
|
```bash
|
|
npx promptfoo@latest init --example openai-codex-sdk/bedrock
|
|
```
|
|
|
|
## Prerequisites
|
|
|
|
1. Install the Codex SDK:
|
|
|
|
```bash
|
|
npm install @openai/codex-sdk
|
|
```
|
|
|
|
2. Request access to the OpenAI frontier models in a supported AWS Region:
|
|
- GPT-5.5: `us-east-2`
|
|
- GPT-5.4: `us-east-2`, `us-west-2`
|
|
|
|
3. Export AWS credentials (the Codex CLI reads them from its environment):
|
|
|
|
```bash
|
|
export AWS_ACCESS_KEY_ID="your_access_key"
|
|
export AWS_SECRET_ACCESS_KEY="your_secret_key"
|
|
```
|
|
|
|
## How it works
|
|
|
|
- `model_provider: amazon-bedrock` routes Codex through Bedrock's OpenAI-compatible
|
|
endpoint (`https://bedrock-mantle.<region>.api.aws/openai/v1`).
|
|
- `model: openai.gpt-5.5` uses the Bedrock model id (note the `openai.` prefix).
|
|
- AWS credentials and `AWS_REGION` are forwarded to the Codex CLI via `cli_env` because
|
|
promptfoo runs the CLI with a minimal environment by default. You may instead set
|
|
`AWS_BEARER_TOKEN_BEDROCK` (a Bedrock API key), `AWS_PROFILE`, or
|
|
`inherit_process_env: true`. If you use temporary credentials (SSO / STS / assumed
|
|
roles / MFA), also forward `AWS_SESSION_TOKEN` (uncomment it in the config).
|
|
|
|
> **Security note:** values placed in `cli_env` are exposed to the Codex agent's shell
|
|
> environment. Scope the IAM permissions to Bedrock inference and prefer short-lived
|
|
> credentials.
|
|
|
|
> **Heads up:** export the AWS credentials before running. If `AWS_ACCESS_KEY_ID` /
|
|
> `AWS_SECRET_ACCESS_KEY` are unset, the unresolved `{{env.*}}` template is forwarded to the
|
|
> Codex CLI verbatim, and you'll get an opaque AWS auth error (e.g. `UnrecognizedClientException`)
|
|
> rather than a clear "credentials not set" message.
|
|
|
|
For direct (non-agentic) inference against the same models, use the
|
|
[`bedrock:` provider](https://www.promptfoo.dev/docs/providers/aws-bedrock/#openai-models)
|
|
(`bedrock:openai.gpt-5.5`).
|
|
|
|
## Run it
|
|
|
|
```bash
|
|
promptfoo eval -c examples/openai-codex-sdk/bedrock/promptfooconfig.yaml
|
|
```
|