Connect to AWS Bedrock using AWS SSO (AWS Profile / IAM Role)

Where does the bug appear (feature/product)?

Cursor IDE

Describe the Bug

Ncib Sami [email protected]
10:41 (il y a 3 heures)
À hi

Hello Cursor Team,

I am experiencing an issue connecting AWS Bedrock to Cursor in an environment that uses AWS SSO.

Context
AWS Authentication: SSO (via AWS CLI)

Bedrock Region: eu-west-3

OS: Windows

AWS CLI: Installed and working

SSO login is successful with:

aws sso login --profile xxxxxxxxx
aws sts get-caller-identity --profile xxxxxxxxxx
Issue
In the Cursor UI (Settings → Models → AWS Bedrock), I only see the following fields:

Access Key ID

Secret Access Key

Region

Test Model

I do not see any option to select:

AWS Profile

or IAM Role

Since I am using AWS SSO, I cannot use static access keys.
When I try to rely on temporary credentials (AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY / AWS_SESSION_TOKEN), I get the following error in Cursor:

The security token included in the request is invalid

It appears that Cursor does not detect or allow the use of an AWS profile configured via ~/.aws/config and ~/.aws/credentials.

Question
Could you please confirm:

Whether authentication via AWS Profile / IAM Role / AWS SSO is supported in the current version of Cursor?

If so, how can this option be enabled in the UI?

This feature is essential in enterprise environments where the use of static access keys is not allowed.

Thank you in advance for your support.

Best regards,
Ncib Sami

Steps to Reproduce

try to connect on version of cursor 2.3.35
connect to aws bedrock with sso

Screenshots / Screen Recordings

Operating System

Windows 10/11

Version Information

Version: 2.3.35 (system setup)
VSCode Version: 1.105.1
Commit: cf8353edc265f5e46b798bfb276861d0bf3bf120
Date: 2026-01-13T07:39:18.564Z
Electron: 37.7.0
Chromium: 138.0.7204.251
Node.js: 22.20.0
V8: 13.8.258.32-electron.0
OS: Windows_NT x64 10.0.26200

Does this stop you from using Cursor

Sometimes - I can sometimes use Cursor

Hey @ Ncib_Sami!

Cursor currently only supports static AWS access keys for Bedrock integration. There is no option for AWS Profile, IAM Role, or AWS SSO authentication at this time.

I’ve moved your post to the section of our forum dedicated to Feature Requests.