← Back to documentation

Amazon Bedrock in an enterprise architecture

Define the model service, application responsibilities and evidence needed before a pilot.

Begin with a workflow and its boundary

Choose one repeatable task, such as finding the current procedure in an approved handbook. Prepare representative questions, permitted documents, expected answers and examples the system must refuse. Record the data owner, application owner and reviewer. A model demonstration without these inputs cannot show whether the workflow is suitable for production.

Bedrock provides managed access to supported foundation models. Your application still owns user identity, document authorization, tool execution, business rules and the customer experience. Knowledge Bases can supply retrieved context; Guardrails can evaluate supported content. Neither replaces the application's access controls or an evaluation dataset.

Select the interface before writing integration code

Record five values together: model, AWS Region, inference endpoint, API and authentication method. Converse and InvokeModel use Bedrock request formats. OpenAI-compatible Responses or Chat Completions and Anthropic-native Messages use their respective formats. Support varies by model and endpoint; a compatible SDK does not make every API or feature available.

For new integrations AWS recommends Runtime when it supports the required capability. A geographic or global inference profile may process data outside the source Region. Check routing against the approved data boundary before using it.

Produce a reviewable pilot package

  • Draw the request path from the user through authentication, retrieval, model and any business system.
  • Compare a simple model call with the minimum retrieval or tool capability the task actually needs.
  • Test valid, missing-information and unauthorized requests separately.
  • Record quality, latency, token usage, failure behavior and operational ownership.

The output should be a scoped architecture, sample results and a list of unresolved dependencies. Decide whether to proceed using those results; do not equate a successful API call with an accepted business application.

Official references

Documentation checked: 17 October 2026. The instructions are reference guidance; no cloud API was called for this article.