Get xBind
Cloud Integration Quickstart

AWS Bedrock + xBind in 5 Minutes

Replace IAM roles and access keys with cryptographic identity. Invoke Claude, Llama, Titan, and Jurassic models without AWS credentials. Zero IAM complexity.

Cloud Integration Layer Zero AWS Credentials Cross-Account Access
01 — Installation

Install xBind Cloud Integration

xBind includes a cloud integration layer that handles AWS Bedrock authentication without IAM roles or access keys.

# Install xBind with cloud integration support
npm install @private.me/xbind @private.me/cloud-integrations

# Or using yarn
yarn add @private.me/xbind @private.me/cloud-integrations

Note: The cloud integration layer requires xBind Basic tier or higher. Free tier supports local development only.

02 — Cloud Integration Setup

Configure AWS Bedrock Access

xBind uses cryptographic identity to authenticate with AWS Bedrock. No IAM roles, no access keys, no credential rotation.

import { configureCloudIntegration } from '@private.me/cloud-integrations';

// One-time setup: register your xBind identity with AWS Bedrock
await configureCloudIntegration({
  provider: 'aws-bedrock',
  region: 'us-east-1',
  identity: await connect('bedrock-access') // xBind identity
});

What Happens Under the Hood

  • Identity Generation: xBind creates a cryptographic identity (DID) for your application
  • Cloud Registration: The integration layer registers your DID with AWS Bedrock
  • Zero Credentials: No access keys, secret keys, or session tokens are generated
  • Cross-Account: Works across AWS accounts without VPC peering or transit gateways
03 — Code Example

Invoke Bedrock Models with xBind

Replace AWS SDK authentication with xBind identity. Same API, zero IAM complexity.

import { connect } from '@private.me/xbind';

// Connect to Bedrock via xBind identity
const bedrock = await connect('bedrock-access');

// Invoke Claude 3.5 Sonnet on AWS Bedrock
const response = await bedrock.value.agent.send({
  to: 'anthropic.claude-3-5-sonnet-20241022-v2:0',
  payload: {
    messages: [
      { role: 'user', content: 'Explain quantum computing in simple terms' }
    ],
    max_tokens: 1024,
    temperature: 0.7
  }
});

console.log(response.value.content);

// Invoke Meta Llama 3.3 70B Instruct
const llamaResponse = await bedrock.value.agent.send({
  to: 'meta.llama3-3-70b-instruct-v1:0',
  payload: {
    prompt: 'Write a haiku about machine learning',
    max_gen_len: 512
  }
});

console.log(llamaResponse.value.generation);

Traditional AWS SDK Approach (What You Replace)

// OLD: IAM roles, credentials, session tokens
import { BedrockRuntimeClient, InvokeModelCommand } from '@aws-sdk/client-bedrock-runtime';

const client = new BedrockRuntimeClient({
  region: 'us-east-1',
  credentials: {
    accessKeyId: process.env.AWS_ACCESS_KEY_ID,     // Leaked = breach
    secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY, // Rotated = cascade
    sessionToken: process.env.AWS_SESSION_TOKEN     // Expired = outage
  }
});

const command = new InvokeModelCommand({
  modelId: 'anthropic.claude-3-5-sonnet-20241022-v2:0',
  body: JSON.stringify({ /* ... */ })
});

const response = await client.send(command);
// ^ IAM policies, VPC endpoints, KMS keys, CloudTrail logs...

xBind Approach (Zero IAM)

// NEW: Cryptographic identity, zero credentials
const bedrock = await connect('bedrock-access');
const response = await bedrock.value.agent.send({ to, payload });
// ^ No IAM, no credentials, no cascade failures
04 — Why xBind for AWS Bedrock

Zero IAM Complexity

xBind eliminates the most complex parts of AWS Bedrock deployment.

No IAM Roles
No trust policies, no assume-role chains, no cross-account headaches. Identity is cryptographic, not policy-based.
No Access Keys
Zero credentials to leak, rotate, or expire. No cascading failures when session tokens expire.
Cross-Account by Default
Access Bedrock models across AWS accounts without VPC peering, transit gateways, or PrivateLink.
Audit Trail Built-In
Every Bedrock invocation is signed by xBind identity. No CloudTrail configuration needed.
Serverless-Native
Works in Lambda, Fargate, ECS, Kubernetes. No VPC endpoints, no NAT gateways.
Zero Trust by Design
Every request is authenticated and signed. No implicit trust based on network location.
05 — Supported Models

All AWS Bedrock Models

xBind works with every model available on AWS Bedrock. Just change the to field.

Anthropic Claude Models

  • anthropic.claude-3-5-sonnet-20241022-v2:0 — Claude 3.5 Sonnet (latest)
  • anthropic.claude-3-opus-20240229-v1:0 — Claude 3 Opus
  • anthropic.claude-3-haiku-20240307-v1:0 — Claude 3 Haiku (fastest)
  • anthropic.claude-instant-v1 — Claude Instant (legacy)

Meta Llama Models

  • meta.llama3-3-70b-instruct-v1:0 — Llama 3.3 70B Instruct
  • meta.llama3-1-405b-instruct-v1:0 — Llama 3.1 405B Instruct
  • meta.llama3-1-70b-instruct-v1:0 — Llama 3.1 70B Instruct
  • meta.llama3-1-8b-instruct-v1:0 — Llama 3.1 8B Instruct

Amazon Titan Models

  • amazon.titan-text-express-v1 — Titan Text Express
  • amazon.titan-text-lite-v1 — Titan Text Lite
  • amazon.titan-embed-text-v1 — Titan Embeddings

AI21 Labs Jurassic Models

  • ai21.j2-ultra-v1 — Jurassic-2 Ultra
  • ai21.j2-mid-v1 — Jurassic-2 Mid

Cohere Models

  • cohere.command-text-v14 — Command (text generation)
  • cohere.embed-english-v3 — Embed English (embeddings)
06 — Next Steps

Resources

Production Deployment: Contact contact@private.me for enterprise support, cross-account setup assistance, and compliance guidance (FedRAMP, HIPAA, SOC 2).