Hi ,
Our company only works with Bedrock with SSO login, not with API key and IAM users.
Is there an option to configure to work with Bedrock sso?
Hey! Thanks for the question.
Right now, Cursor supports AWS Bedrock integration in two ways:
- IAM role (recommended) - assume a role in another AWS account
- Access keys - AWS Access Key ID + Secret Access Key
Direct authentication via SSO isn’t supported yet.
Possible workaround: you can set up an IAM role that your SSO users can assume, then select that role in Cursor. The IAM role method uses secure cross-account access with External ID verification.
Full setup guide: AWS Bedrock | Cursor Docs
If this approach doesn’t match your security requirements, I’d recommend submitting a feature request in Feature Requests. Other enterprise users have made similar requests.
It’s a popular request, here is appropriate issue on github: Support for temporary AWS credentials(aws_session_token) integration for Bedrock · Issue #3450 · cursor/cursor · GitHub
Would be cool if you add it.
For now I created a workaround that works with aws sso login, GitHub - bakwc/bedrock-openai-proxy: Proxy server to use AWS Bedrock models with OpenAI-compatible API. not so convenient as having this option directly in cursor, but at least it works.