From the source
Amazon's walkthrough shows organizations how to configure the ChatGPT desktop app to send model inference to Amazon Bedrock in AWS GovCloud (US-West), for agencies whose security architecture requires GovCloud identities, endpoints and Regional controls.
- The guide routes Codex requests through Amazon Bedrock Mantle in us-gov-west-1, where access is governed with AWS Identity and Access Management and existing GovCloud network controls.
- It covers three steps: authentication, the config.toml and requirements.toml files, then launch and verification, using API-mode sign-in, a managed device policy, a named AWS profile and network restrictions that allow only the approved Bedrock endpoint.
- The app supports an Amazon Bedrock API key or the AWS SDK credential chain, including AWS SSO through IAM Identity Center, and checks AWS_BEARER_TOKEN_BEDROCK first.
- Amazon says processing stays in the selected Bedrock Region, you pay per token with no seat licenses, and zero data retention is supported, with prompts and responses not written to durable storage by AWS or shared with model providers.
- Amazon cautions that following the guide does not by itself authorize a workload; organizations remain responsible for reviewing the model, services, Region, endpoint, workstation controls, repositories, credentials and data flows against their system security plan.