Files
tradingagents/tradingagents/llm_clients/bedrock_client.py
Yijia-Xiao 43bd32befa feat(llm): support Bedrock API-key auth via AWS_BEARER_TOKEN_BEDROCK
- pass the token to ChatBedrockConverse as api_key so langchain-aws prefers bearer
  auth and an ambient AWS_PROFILE can't override it; no AWS access keys required #1103
2026-07-05 14:29:07 +00:00

77 lines
3.0 KiB
Python

import os
from typing import Any
from .base_client import BaseLLMClient, normalize_content
from .validators import validate_model
# Bedrock has no global default region; us-west-2 hosts the broadest model set.
_DEFAULT_REGION = "us-west-2"
_BEDROCK_CLASS = None
def _bedrock_class():
"""Lazily import langchain-aws (the optional ``[bedrock]`` extra) and return a
ChatBedrockConverse subclass with normalized content output.
Imported on demand so the optional dependency (and boto3) isn't required by
the rest of the package; cached after the first call.
"""
global _BEDROCK_CLASS
if _BEDROCK_CLASS is not None:
return _BEDROCK_CLASS
try:
from langchain_aws import ChatBedrockConverse
except ImportError as exc:
raise ImportError(
"AWS Bedrock support requires the optional 'langchain-aws' dependency. "
'Install it with: pip install "tradingagents[bedrock]"'
) from exc
class NormalizedChatBedrockConverse(ChatBedrockConverse):
"""ChatBedrockConverse with normalized (string) content output."""
def invoke(self, input, config=None, **kwargs):
return normalize_content(super().invoke(input, config, **kwargs))
_BEDROCK_CLASS = NormalizedChatBedrockConverse
return _BEDROCK_CLASS
class BedrockClient(BaseLLMClient):
"""Client for Amazon Bedrock via the Converse API (langchain-aws).
Authentication is either a Bedrock API key (bearer token) via
``AWS_BEARER_TOKEN_BEDROCK`` — no AWS access keys required — or the standard
AWS credential chain (env vars, ``~/.aws/credentials``, or an IAM role) with
optional ``AWS_PROFILE``. Set ``AWS_REGION`` / ``AWS_DEFAULT_REGION`` either
way (the token carries no region). The model name is a Bedrock model ID or
cross-region inference profile ID, e.g. ``us.anthropic.claude-opus-4-8-v1:0``.
"""
def get_llm(self) -> Any:
"""Return a configured ChatBedrockConverse instance."""
self.warn_if_unknown_model()
chat_cls = _bedrock_class()
region = (
os.environ.get("AWS_REGION")
or os.environ.get("AWS_DEFAULT_REGION")
or _DEFAULT_REGION
)
llm_kwargs = {"model": self.model, "region_name": region}
# A Bedrock API key authenticates without AWS access keys. Passing it as
# api_key makes langchain-aws prefer bearer auth, so an ambient
# AWS_PROFILE / SigV4 credentials can't override it (#1103).
bearer_token = os.environ.get("AWS_BEARER_TOKEN_BEDROCK")
if bearer_token:
llm_kwargs["api_key"] = bearer_token
for key in ("temperature", "max_tokens", "max_retries", "callbacks"):
if key in self.kwargs:
llm_kwargs[key] = self.kwargs[key]
return chat_cls(**llm_kwargs)
def validate_model(self) -> bool:
"""Validate model for Bedrock (any model ID accepted)."""
return validate_model("bedrock", self.model)