Unlocking AI models in Standard AWS Regions from AWS GovCloud (US): Cross-partition access with Amazon Bedrock

This article explains how AWS GovCloud (US) workloads can securely access Amazon Bedrock AI models in Standard AWS Regions through three connectivity approaches.

• GovCloud workloads send HTTPS requests to Bedrock in Standard Regions via cross-partition connections
• TLS encryption protects data in transit; Lambda retrieves API keys from Secrets Manager
• Option 1: Internet-based connectivity for quick POCs; traffic crosses public internet
• Option 2: Site-to-Site VPN with private endpoints; encrypted tunnel, moderate setup complexity
• Option 3: AWS Direct Connect; dedicated private connection, highest security and performance
• All options require Bedrock API key authentication and model access enabled in destination region
• Data transfer costs incurred in both accounts; compliance review essential before implementation

Organizations should evaluate these options against their compliance requirements, data sensitivity, and existing network infrastructure to select the appropriate connectivity method.