PingOne Privilege

Configuring Bedrock

Connect Amazon Web Services (AWS) Bedrock as a workload agent application so AI discovery for workload agents can review the agents running in the account. Learn more in Discover and manage workload agents.

  1. In the PingOne Privilege admin console, go to AI Security > Workload Agents.

  2. Click the Add Application tab.

  3. In the list of available applications, find Bedrock and click Integrate.

  4. Enter a Name for the connection, such as my-bedrock-prod.

  5. (Optional) Enter a Description.

  6. Click Next.

  7. Add your credentials using one of the following methods:

    • Enter the Template URL and External ID directly in the setup wizard.

    • Click Open CF Template to launch into AWS to enter credentials there.

  8. Click Next.

  9. After the stack status is CREATE_COMPLETE, open the Outputs tab in CloudFormation and paste the Cross Account Role ARN into the setup wizard.

  10. (Optional): Add comma-separated Regions. Leave this field empty to scan all regions.

  11. Review the summary, then click Add Connection.

You can now validate that the connection is active in the Active Applications tab.