[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-cline-dr-bedrock":3,"mdc--cwcq8x-key":33,"related-org-cline-dr-bedrock":3322,"related-repo-cline-dr-bedrock":3519},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":11,"stars":22,"repoUrl":23,"updatedAt":24,"license":25,"forks":26,"topics":27,"repo":28,"sourceUrl":31,"mdContent":32},"dr-bedrock","troubleshoot AWS Bedrock authentication","Troubleshoot local AWS Bedrock authentication and region configuration for the Cline CLI as Dr. Bedrock. Use when users report Bedrock CLI errors, AWS profile\u002Fdefault-chain issues, credential_process\u002FSSO\u002FIAM credential failures, missing region, AccessDenied, model access, or provider config problems.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},"cline","Cline","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fcline.png",[12,16,19],{"name":13,"slug":14,"type":15},"CLI","cli","tag",{"name":17,"slug":18,"type":15},"AWS","aws",{"name":20,"slug":21,"type":15},"Debugging","debugging",10,"https:\u002F\u002Fgithub.com\u002Fcline\u002Fskills","2026-07-12T08:13:27.017762",null,4,[],{"repoUrl":23,"stars":22,"forks":26,"topics":29,"description":30},[],"A collection of skills used at Cline","https:\u002F\u002Fgithub.com\u002Fcline\u002Fskills\u002Ftree\u002FHEAD\u002Fskills\u002Fdr-bedrock","---\nname: dr-bedrock\ndescription: Troubleshoot local AWS Bedrock authentication and region configuration for the Cline CLI as Dr. Bedrock. Use when users report Bedrock CLI errors, AWS profile\u002Fdefault-chain issues, credential_process\u002FSSO\u002FIAM credential failures, missing region, AccessDenied, model access, or provider config problems.\n---\n\n# Dr. Bedrock: Cline CLI Bedrock Auth Troubleshooter\n\nUse this skill to diagnose local AWS Bedrock auth\u002Fconfiguration for the Cline CLI and report likely causes plus user-actionable fixes. This skill identifies problems only.\n\n## Invocation rule\n\nWhen this skill is invoked, the first thing you say to the user must always be exactly:\n\n```text\nPaging Dr. Bedrock...\n```\n\nThen proceed with diagnostics or reporting.\n\n## Hard safety rules\n\n- **DO NOT make any file changes on the system.** You are not fixing the problem, only identifying it.\n- **DO NOT read or print sensitive credentials.** If reading a file that may contain credentials, use a command that filters or redacts credential values before they reach the transcript.\n- **DO NOT suggest code changes in Cline.** Suggest user fixes: AWS auth setup, Cline CLI upgrade, reconfigure provider, export environment variables, refresh SSO, request Bedrock model access, etc.\n- Avoid cost-incurring model invocations unless the user explicitly asks for a live invocation test. Prefer STS identity and Bedrock model-list\u002Faccess checks.\n\n## What to determine\n\nClassify the likely auth scheme, then validate region, credentials, Cline config, and Bedrock model access.\n\nAuth schemes to consider:\n\n1. **Bedrock API key**: Cline config has `apiKey` or `aws.authentication: \"api-key\"`.\n2. **Direct IAM keys in Cline config**: `aws.accessKey` + `aws.secretKey`, optional `aws.sessionToken`.\n3. **Named AWS profile**: `aws.authentication: \"profile\"` and `aws.profile`, or `AWS_PROFILE`.\n4. **Default AWS provider chain**: `aws.authentication: \"iam\"` or profile auth with no saved profile name.\n5. **AWS IAM Identity Center \u002F SSO**: profile contains `sso_session`, `sso_start_url`, `sso_account_id`, or `sso_role_name`.\n6. **credential_process**: profile contains `credential_process`.\n7. **Assume role profile**: profile contains `role_arn` with `source_profile`, `credential_source`, or web identity.\n8. **Web identity \u002F OIDC**: `AWS_ROLE_ARN` + `AWS_WEB_IDENTITY_TOKEN_FILE` or profile web identity settings.\n9. **ECS\u002FEC2 metadata**: container metadata env vars or IMDS on EC2.\n\n## Known Cline CLI Bedrock failure modes\n\nUse these as recognition patterns, not as code-change recommendations:\n\n| Symptom | Likely cause | User-facing fix |\n|---|---|---|\n| `AWS region setting is missing. Pass it using the 'region' parameter or the AWS_REGION environment variable.` | Older CLI provider path did not forward Bedrock region\u002Foptions to the gateway (#10770; fixed by PR #10807 \u002F related #10818). | Upgrade Cline CLI. Work around by exporting `AWS_REGION=\u003Cregion>` and reconfiguring Bedrock if upgrade is not possible. |\n| Profile auth says provider configured, then no provider is ready | Older readiness logic treated Bedrock like API-key-only (#6958). | Upgrade Cline CLI and re-run Bedrock provider setup. |\n| `AWS credential provider failed: Could not load credentials from any providers` with `credential_process` | Missing\u002Funsaved profile name, shared config not loaded, bad `credential_process`, or affected CLI build (#10930; PR #10932; legacy migration PR #10943). | Upgrade Cline CLI; ensure `aws.profile` or `AWS_PROFILE` names the profile; try `AWS_SDK_LOAD_CONFIG=1`; verify `aws sts get-caller-identity --profile \u003Cprofile>`. |\n| Migrated config has `aws.authentication: \"profile\"` but no `aws.profile` | Legacy migration dropped `awsProfile` when old `awsUseProfile` was absent (#10943). | Upgrade Cline CLI and re-run migration, or reconfigure Bedrock so the profile name is saved. |\n| API-key Bedrock auth not recognized or mixed up with region env | Older auth mapping before API-key alignment (#10731). | Upgrade Cline CLI; confirm Cline config uses Bedrock API key auth and still has a region. |\n| ACP\u002Feditor integration asks for Cline\u002FChatGPT auth even though CLI Bedrock works | Older ACP auth readiness issue (#9404). | Upgrade Cline CLI and verify ACP uses the same config directory. |\n| Custom application inference profile ARN cannot be entered\u002Fused | Older CLI model picker limitation (#9244\u002F#9271). | Upgrade Cline CLI; use custom\u002FARN model entry flow if available. |\n\n## Safe diagnostics workflow\n\n### 1. Establish versions and config location\n\nRun safe read-only commands:\n\n```sh\ncline --version 2>\u002Fdev\u002Fnull || npx cline --version 2>\u002Fdev\u002Fnull || true\nnode --version 2>\u002Fdev\u002Fnull || true\naws --version 2>\u002Fdev\u002Fnull || true\npwd\n```\n\nAsk whether the user runs Cline with `--config \u003Cdir>`. If yes, inspect that config directory; otherwise inspect `~\u002F.cline\u002Fdata`.\n\n### 2. Inspect Cline provider config with redaction\n\nNever print raw provider\u002Fsecrets files. Prefer `jq`; otherwise use Node.\n\n```sh\nCLINE_DATA_DIR=\"${CLINE_DATA_DIR:-$HOME\u002F.cline\u002Fdata}\"\nPROVIDERS=\"$CLINE_DATA_DIR\u002Fsettings\u002Fproviders.json\"\n\nif [ -f \"$PROVIDERS\" ] && command -v jq >\u002Fdev\u002Fnull 2>&1; then\n  jq '\n    def redact:\n      if type == \"object\" then\n        with_entries(if (.key|test(\"(?i)(key|secret|token|password|credential)\")) then .value=\"\u003Credacted>\" else .value=(.value|redact) end)\n      elif type == \"array\" then map(redact)\n      else . end;\n    .providers.bedrock.settings? | redact\n  ' \"$PROVIDERS\"\nelif [ -f \"$PROVIDERS\" ]; then\n  node -e '\n    const fs=require(\"fs\"); const p=process.argv[1];\n    const v=JSON.parse(fs.readFileSync(p,\"utf8\"));\n    const r=(x)=>Array.isArray(x)?x.map(r):x&&typeof x===\"object\"?Object.fromEntries(Object.entries(x).map(([k,v])=>[k,\u002F(key|secret|token|password|credential)\u002Fi.test(k)?\"\u003Credacted>\":r(v)])):x;\n    console.log(JSON.stringify(r(v.providers?.bedrock?.settings), null, 2));\n  ' \"$PROVIDERS\"\nelse\n  echo \"No providers.json at $PROVIDERS\"\nfi\n```\n\nInterpretation:\n\n- `provider` should be `bedrock`.\n- `model` should be present.\n- `aws.region` or top-level `region` should be present unless `AWS_REGION`\u002F`AWS_DEFAULT_REGION` supplies it.\n- If `aws.authentication` is `profile` but there is no `aws.profile` and no `AWS_PROFILE`, Cline will probably use the default AWS SDK credential chain. **This is not a failure mode by itself.** Treat it as healthy if the default-chain AWS identity and Bedrock checks succeed.\n- If `aws.authentication` is `iam`, Cline is likely using the default AWS SDK chain.\n- If `apiKey` is present or `aws.authentication` is `api-key`, this is Bedrock API key auth; AWS IAM profile checks may not apply, but region still does.\n\nAlso inspect legacy files only with redaction\u002Fkey-presence checks if migration is suspected:\n\n```sh\nLEGACY=\"$CLINE_DATA_DIR\u002FglobalState.json\"\nSECRETS=\"$CLINE_DATA_DIR\u002Fsecrets.json\"\n[ -f \"$LEGACY\" ] && jq '{awsRegion, awsAuthentication, awsUseProfile, awsProfile, awsUseCrossRegionInference, awsUseGlobalInference, awsBedrockUsePromptCache}' \"$LEGACY\" 2>\u002Fdev\u002Fnull || true\n[ -f \"$SECRETS\" ] && jq 'keys | map(select(test(\"(?i)(aws|bedrock)\")))' \"$SECRETS\" 2>\u002Fdev\u002Fnull || true\n```\n\nDo not print values from `secrets.json`.\n\n### 3. Inspect AWS environment safely\n\nEnvironment credentials can override profile\u002Fdefault-chain behavior. Print presence, not credential values:\n\n```sh\npython3 - \u003C\u003C'PY'\nimport os, re\nsafe = [\"AWS_PROFILE\",\"AWS_REGION\",\"AWS_DEFAULT_REGION\",\"AWS_CONFIG_FILE\",\"AWS_SHARED_CREDENTIALS_FILE\",\"AWS_SDK_LOAD_CONFIG\"]\nsecretish = [\"AWS_ACCESS_KEY_ID\",\"AWS_SECRET_ACCESS_KEY\",\"AWS_SESSION_TOKEN\",\"AWS_SECURITY_TOKEN\"]\nfor k in safe:\n    if k in os.environ:\n        print(f\"{k}={os.environ[k]}\")\nfor k in secretish:\n    if k in os.environ:\n        print(f\"{k}=\u003Cset redacted>\")\nfor k in [\"AWS_ROLE_ARN\",\"AWS_WEB_IDENTITY_TOKEN_FILE\",\"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\",\"AWS_CONTAINER_CREDENTIALS_FULL_URI\"]:\n    if k in os.environ:\n        v = os.environ[k]\n        if k == \"AWS_ROLE_ARN\": v = re.sub(r\"arn:aws[a-z-]*:iam::\\d{12}:\", \"arn:aws:iam::\u003Caccount>:\", v)\n        print(f\"{k}={v}\")\nPY\n```\n\nFlag these issues:\n\n- `AWS_ACCESS_KEY_ID`\u002F`AWS_SECRET_ACCESS_KEY` are set unexpectedly: they can take precedence over profiles and point Cline at the wrong account.\n- `AWS_PROFILE` differs from Cline `aws.profile`: Cline should use the saved profile when present; otherwise environment\u002Fdefault chain may be used. Only treat this as a likely issue if the resolved identity\u002Faccount\u002Fregion is demonstrably wrong for the intended Bedrock access.\n- No region in Cline config or env: Bedrock calls will fail.\n- Temporary env keys are set without `AWS_SESSION_TOKEN`: STS-derived credentials will fail.\n\n### 4. Inspect AWS config\u002Fcredentials files without secrets\n\nList profile sections and non-secret key names. Do not print access key values.\n\n```sh\nAWS_CONFIG_FILE=\"${AWS_CONFIG_FILE:-$HOME\u002F.aws\u002Fconfig}\"\nAWS_SHARED_CREDENTIALS_FILE=\"${AWS_SHARED_CREDENTIALS_FILE:-$HOME\u002F.aws\u002Fcredentials}\"\n\nfor f in \"$AWS_CONFIG_FILE\" \"$AWS_SHARED_CREDENTIALS_FILE\"; do\n  echo \"--- $f ---\"\n  [ -f \"$f\" ] || { echo \"missing\"; continue; }\n  awk '\n    \u002F^\\[\u002F { section=$0; print section; next }\n    \u002F^[[:space:]]*(aws_access_key_id|aws_secret_access_key|aws_session_token)[[:space:]]*=\u002F { print \"  \" $1 \"=\u003Credacted>\"; next }\n    \u002F^[[:space:]]*(region|sso_session|sso_start_url|sso_region|sso_account_id|sso_role_name|role_arn|source_profile|credential_source|web_identity_token_file|credential_process)[[:space:]]*=\u002F {\n      key=$1; sub(\u002F[[:space:]]*=.*\u002F, \"\", key)\n      if (key ~ \u002Frole_arn\u002F) print \"  \" key \"=\u003Cpresent redacted>\";\n      else if (key ~ \u002Fcredential_process\u002F) print \"  \" key \"=\u003Cpresent redacted>\";\n      else print \"  \" $0\n    }\n  ' \"$f\"\ndone\n```\n\nInterpretation:\n\n- In `~\u002F.aws\u002Fconfig`, named profiles are `[profile name]`; in `~\u002F.aws\u002Fcredentials`, they are `[name]`.\n- A profile with `credential_process` should work through the AWS SDK chain in fixed CLI builds, but it must be the active profile.\n- SSO profiles require a valid cached login: run `aws sso login --profile \u003Cprofile>` as the user if expired.\n- Assume-role profiles require the source profile or credential source to be valid.\n\n### 5. Validate AWS identity without exposing credentials\n\nUse the likely profile and region. If no profile is configured, omit `--profile` to test the default chain.\n\n```sh\nPROFILE_ARG=\"--profile \u003Cprofile>\"   # replace or leave empty for default chain\nREGION_ARG=\"--region \u003Cregion>\"      # replace with Cline\u002FAWS region\n\naws sts get-caller-identity $PROFILE_ARG --output json\naws configure list $PROFILE_ARG\n```\n\n`get-caller-identity` does not reveal secret credentials, but account IDs\u002Frole names can be sensitive. Redact them in the final report unless the user already shared them.\n\nEvaluation rules:\n\n- If Cline is using the default credential chain and `aws sts get-caller-identity` succeeds without `--profile`, that auth path looks good unless there is direct evidence that Cline runs in a different environment.\n- If `aws configure list` reports credential source\u002Ftype as `login` and STS plus Bedrock list\u002Fget model calls succeed, treat the AWS CLI login\u002Fdefault-chain path as working. Do **not** claim Cline cannot use it unless there is an actual Cline error or version-specific evidence.\n- A missing saved `aws.profile` is only a problem when the user intended a specific non-default profile and the default-chain identity is wrong or cannot access Bedrock.\n- Absence of `~\u002F.aws\u002Fcredentials`, SSO fields, `credential_process`, or `AWS_PROFILE` is not a problem when another default-chain source resolves successfully.\n\nFix guidance by failure:\n\n- SSO token expired: `aws sso login --profile \u003Cprofile>`.\n- Process provider failed: confirm the profile selected by Cline is the one with `credential_process`; test `aws sts get-caller-identity --profile \u003Cprofile>`; ensure the process is executable and returns AWS process-credential JSON.\n- Cannot find profile: set\u002Freconfigure Cline `aws.profile`, export `AWS_PROFILE`, or fix section names in AWS files.\n- Env keys point to wrong account: unset them or launch Cline from a shell with the intended env.\n\n### 6. Validate Bedrock region\u002Fmodel access without invoking a model\n\n```sh\naws bedrock list-foundation-models $PROFILE_ARG $REGION_ARG --by-output-modality TEXT --output table\n```\n\nIf the selected model is known, also check availability where supported:\n\n```sh\naws bedrock get-foundation-model $PROFILE_ARG $REGION_ARG --model-identifier '\u003Cmodel-id>' --output json\n```\n\nTroubleshoot results:\n\n- `AccessDeniedException`: identity lacks `bedrock:InvokeModel`, `bedrock:InvokeModelWithResponseStream`, list\u002Fget model permissions, Marketplace\u002Fmodel access permissions, or an SCP\u002Fpermission boundary denies access.\n- Model absent in region: choose a model\u002Finference profile available in that region, change region, or use a valid cross-region\u002Fglobal inference profile.\n- Anthropic first-time access: complete Bedrock model access \u002F use-case form in the AWS account\u002Forganization. Marketplace permissions may be required for first-time enablement.\n- GovCloud: third-party model access may need enablement in both linked commercial and GovCloud accounts; model availability differs by GovCloud region.\n- Custom\u002Fapplication inference profile ARN: confirm the ARN region\u002Faccount match the configured region\u002Fprofile account and the identity can use that inference profile.\n\n### 7. Rule out Bedrock errors that are not auth problems\n\nIf STS identity and Bedrock model listing work, do not force an auth diagnosis. Some Bedrock failures are request\u002Fhistory\u002Fmodel issues:\n\n- `Invalid type for parameter ... image.source.bytes` or screenshot\u002Fhistory replay failures: likely Bedrock image bytes serialization, not auth (#10926 \u002F PR #10928). Suggest upgrading Cline CLI and retrying a fresh task without replayed screenshot history.\n- Context-window or token-limit errors that arrive as plain text: likely context overflow, not auth (#10838). Suggest compacting\u002Fstarting a fresh task or upgrading Cline CLI for improved detection.\n- `ValidationException` for a model ID\u002FARN: often wrong region, unsupported model ID, missing inference profile, or using an application inference profile ARN with the wrong account\u002Fregion.\n- Errors only after several successful turns usually indicate request content, history, model availability, quota, or context issues rather than credential resolution.\n\n## Final report format\n\nUse one of two output modes.\n\n### Normal mode (default)\n\nBy default, keep the final answer concise and report only:\n\n1. **Recommended user fixes or next checks**: commands or UI actions. Do not suggest Cline code changes. If everything looks good, recommend no changes or only optional next checks.\n2. **Diagnosis**: one of exactly these two outcomes:\n   - **Likely issue found**: concise bullets with evidence and severity. Use this only for issues likely to break Cline, such as missing region, failed STS\u002Fdefault-chain resolution, wrong account\u002Fidentity, expired SSO, failed `credential_process`, denied Bedrock access, unavailable selected model\u002Fregion, or a known affected Cline version paired with the matching symptom.\n   - **Looks good**: explicitly say the checked configuration\u002Fauth path looks good and no likely cause was found. Optionally include a short **Low-probability observations** addition for minor or theoretical findings that are unlikely to be causing the user's current issue.\n\nThe **Diagnosis** must be the last section in the report. In the diagnosis text, tell the user to scroll up for remediation steps or optional next checks.\n\nAt the end of normal-mode output, tell the user they can ask for deeper debugging information by saying something like: `Show me Dr. Bedrock's deep debugging details` or `Run Dr. Bedrock in verbose mode`.\n\n### Verbose \u002F deep debugging mode\n\nIf the user asks for more information, verbose output, deep debugging details, or asks to see how Dr. Bedrock reached the conclusion, include sections 1–4 before the normal-mode sections:\n\n1. **Likely auth scheme**: API key, direct IAM keys, named profile, default chain, SSO, credential_process, assume role, web identity, ECS\u002FEC2.\n2. **Cline CLI config status**: provider\u002Fmodel\u002Fregion present, auth fields present, profile saved or missing, likely affected by known CLI version issues.\n3. **AWS local auth status**: env precedence, profile\u002Fdefault-chain health, STS identity test result (redacted).\n4. **Bedrock access status**: region, model availability, permissions\u002Fmodel-access concerns.\n5. **Recommended user fixes or next checks**: same as normal mode.\n6. **Diagnosis**: same as normal mode and still the final section.\n\nDo **not** invent an issue just to have one. If the config is coherent, AWS identity resolves, region is set, and Bedrock model\u002Flist checks pass, conclude **Looks good**. If something is merely different from a named-profile setup but still resolves through the default credential chain, do not call it a problem. If you noticed possible concerns that are weakly related or unlikely, include them only as optional **Low-probability observations** within the **Looks good** diagnosis rather than presenting them as root causes.\n\n## Common fix snippets\n\n- Upgrade Cline CLI:\n  ```sh\n  npm install -g cline@latest\n  cline --version\n  ```\n- Launch with explicit profile\u002Fregion:\n  ```sh\n  AWS_PROFILE=\u003Cprofile> AWS_REGION=\u003Cregion> AWS_SDK_LOAD_CONFIG=1 cline\n  ```\n- Refresh SSO:\n  ```sh\n  aws sso login --profile \u003Cprofile>\n  aws sts get-caller-identity --profile \u003Cprofile>\n  ```\n- Reconfigure Bedrock in Cline CLI if saved profile\u002Fregion is missing:\n  ```sh\n  cline auth\n  ```\n  Choose AWS Bedrock, leave API key blank for profile\u002Fdefault-chain auth, enter region, and enter the AWS profile name when prompted.\n",{"data":34,"body":35},{"name":4,"description":6},{"type":36,"children":37},"root",[38,47,53,60,65,78,83,89,130,136,141,146,378,384,389,633,639,646,651,790,810,816,829,1258,1263,1414,1419,1641,1653,1659,1664,1812,1817,1873,1879,1884,2264,2268,2337,2343,2356,2485,2496,2501,2588,2593,2650,2656,2705,2710,2763,2768,2817,2823,2828,2863,2869,2874,2880,2885,2945,2956,2975,2981,2986,3047,3076,3082,3316],{"type":39,"tag":40,"props":41,"children":43},"element","h1",{"id":42},"dr-bedrock-cline-cli-bedrock-auth-troubleshooter",[44],{"type":45,"value":46},"text","Dr. Bedrock: Cline CLI Bedrock Auth Troubleshooter",{"type":39,"tag":48,"props":49,"children":50},"p",{},[51],{"type":45,"value":52},"Use this skill to diagnose local AWS Bedrock auth\u002Fconfiguration for the Cline CLI and report likely causes plus user-actionable fixes. This skill identifies problems only.",{"type":39,"tag":54,"props":55,"children":57},"h2",{"id":56},"invocation-rule",[58],{"type":45,"value":59},"Invocation rule",{"type":39,"tag":48,"props":61,"children":62},{},[63],{"type":45,"value":64},"When this skill is invoked, the first thing you say to the user must always be exactly:",{"type":39,"tag":66,"props":67,"children":72},"pre",{"className":68,"code":70,"language":45,"meta":71},[69],"language-text","Paging Dr. Bedrock...\n","",[73],{"type":39,"tag":74,"props":75,"children":76},"code",{"__ignoreMap":71},[77],{"type":45,"value":70},{"type":39,"tag":48,"props":79,"children":80},{},[81],{"type":45,"value":82},"Then proceed with diagnostics or reporting.",{"type":39,"tag":54,"props":84,"children":86},{"id":85},"hard-safety-rules",[87],{"type":45,"value":88},"Hard safety rules",{"type":39,"tag":90,"props":91,"children":92},"ul",{},[93,105,115,125],{"type":39,"tag":94,"props":95,"children":96},"li",{},[97,103],{"type":39,"tag":98,"props":99,"children":100},"strong",{},[101],{"type":45,"value":102},"DO NOT make any file changes on the system.",{"type":45,"value":104}," You are not fixing the problem, only identifying it.",{"type":39,"tag":94,"props":106,"children":107},{},[108,113],{"type":39,"tag":98,"props":109,"children":110},{},[111],{"type":45,"value":112},"DO NOT read or print sensitive credentials.",{"type":45,"value":114}," If reading a file that may contain credentials, use a command that filters or redacts credential values before they reach the transcript.",{"type":39,"tag":94,"props":116,"children":117},{},[118,123],{"type":39,"tag":98,"props":119,"children":120},{},[121],{"type":45,"value":122},"DO NOT suggest code changes in Cline.",{"type":45,"value":124}," Suggest user fixes: AWS auth setup, Cline CLI upgrade, reconfigure provider, export environment variables, refresh SSO, request Bedrock model access, etc.",{"type":39,"tag":94,"props":126,"children":127},{},[128],{"type":45,"value":129},"Avoid cost-incurring model invocations unless the user explicitly asks for a live invocation test. Prefer STS identity and Bedrock model-list\u002Faccess checks.",{"type":39,"tag":54,"props":131,"children":133},{"id":132},"what-to-determine",[134],{"type":45,"value":135},"What to determine",{"type":39,"tag":48,"props":137,"children":138},{},[139],{"type":45,"value":140},"Classify the likely auth scheme, then validate region, credentials, Cline config, and Bedrock model access.",{"type":39,"tag":48,"props":142,"children":143},{},[144],{"type":45,"value":145},"Auth schemes to consider:",{"type":39,"tag":147,"props":148,"children":149},"ol",{},[150,176,209,241,258,297,312,344,368],{"type":39,"tag":94,"props":151,"children":152},{},[153,158,160,166,168,174],{"type":39,"tag":98,"props":154,"children":155},{},[156],{"type":45,"value":157},"Bedrock API key",{"type":45,"value":159},": Cline config has ",{"type":39,"tag":74,"props":161,"children":163},{"className":162},[],[164],{"type":45,"value":165},"apiKey",{"type":45,"value":167}," or ",{"type":39,"tag":74,"props":169,"children":171},{"className":170},[],[172],{"type":45,"value":173},"aws.authentication: \"api-key\"",{"type":45,"value":175},".",{"type":39,"tag":94,"props":177,"children":178},{},[179,184,186,192,194,200,202,208],{"type":39,"tag":98,"props":180,"children":181},{},[182],{"type":45,"value":183},"Direct IAM keys in Cline config",{"type":45,"value":185},": ",{"type":39,"tag":74,"props":187,"children":189},{"className":188},[],[190],{"type":45,"value":191},"aws.accessKey",{"type":45,"value":193}," + ",{"type":39,"tag":74,"props":195,"children":197},{"className":196},[],[198],{"type":45,"value":199},"aws.secretKey",{"type":45,"value":201},", optional ",{"type":39,"tag":74,"props":203,"children":205},{"className":204},[],[206],{"type":45,"value":207},"aws.sessionToken",{"type":45,"value":175},{"type":39,"tag":94,"props":210,"children":211},{},[212,217,218,224,226,232,234,240],{"type":39,"tag":98,"props":213,"children":214},{},[215],{"type":45,"value":216},"Named AWS profile",{"type":45,"value":185},{"type":39,"tag":74,"props":219,"children":221},{"className":220},[],[222],{"type":45,"value":223},"aws.authentication: \"profile\"",{"type":45,"value":225}," and ",{"type":39,"tag":74,"props":227,"children":229},{"className":228},[],[230],{"type":45,"value":231},"aws.profile",{"type":45,"value":233},", or ",{"type":39,"tag":74,"props":235,"children":237},{"className":236},[],[238],{"type":45,"value":239},"AWS_PROFILE",{"type":45,"value":175},{"type":39,"tag":94,"props":242,"children":243},{},[244,249,250,256],{"type":39,"tag":98,"props":245,"children":246},{},[247],{"type":45,"value":248},"Default AWS provider chain",{"type":45,"value":185},{"type":39,"tag":74,"props":251,"children":253},{"className":252},[],[254],{"type":45,"value":255},"aws.authentication: \"iam\"",{"type":45,"value":257}," or profile auth with no saved profile name.",{"type":39,"tag":94,"props":259,"children":260},{},[261,266,268,274,276,282,283,289,290,296],{"type":39,"tag":98,"props":262,"children":263},{},[264],{"type":45,"value":265},"AWS IAM Identity Center \u002F SSO",{"type":45,"value":267},": profile contains ",{"type":39,"tag":74,"props":269,"children":271},{"className":270},[],[272],{"type":45,"value":273},"sso_session",{"type":45,"value":275},", ",{"type":39,"tag":74,"props":277,"children":279},{"className":278},[],[280],{"type":45,"value":281},"sso_start_url",{"type":45,"value":275},{"type":39,"tag":74,"props":284,"children":286},{"className":285},[],[287],{"type":45,"value":288},"sso_account_id",{"type":45,"value":233},{"type":39,"tag":74,"props":291,"children":293},{"className":292},[],[294],{"type":45,"value":295},"sso_role_name",{"type":45,"value":175},{"type":39,"tag":94,"props":298,"children":299},{},[300,305,306,311],{"type":39,"tag":98,"props":301,"children":302},{},[303],{"type":45,"value":304},"credential_process",{"type":45,"value":267},{"type":39,"tag":74,"props":307,"children":309},{"className":308},[],[310],{"type":45,"value":304},{"type":45,"value":175},{"type":39,"tag":94,"props":313,"children":314},{},[315,320,321,327,329,335,336,342],{"type":39,"tag":98,"props":316,"children":317},{},[318],{"type":45,"value":319},"Assume role profile",{"type":45,"value":267},{"type":39,"tag":74,"props":322,"children":324},{"className":323},[],[325],{"type":45,"value":326},"role_arn",{"type":45,"value":328}," with ",{"type":39,"tag":74,"props":330,"children":332},{"className":331},[],[333],{"type":45,"value":334},"source_profile",{"type":45,"value":275},{"type":39,"tag":74,"props":337,"children":339},{"className":338},[],[340],{"type":45,"value":341},"credential_source",{"type":45,"value":343},", or web identity.",{"type":39,"tag":94,"props":345,"children":346},{},[347,352,353,359,360,366],{"type":39,"tag":98,"props":348,"children":349},{},[350],{"type":45,"value":351},"Web identity \u002F OIDC",{"type":45,"value":185},{"type":39,"tag":74,"props":354,"children":356},{"className":355},[],[357],{"type":45,"value":358},"AWS_ROLE_ARN",{"type":45,"value":193},{"type":39,"tag":74,"props":361,"children":363},{"className":362},[],[364],{"type":45,"value":365},"AWS_WEB_IDENTITY_TOKEN_FILE",{"type":45,"value":367}," or profile web identity settings.",{"type":39,"tag":94,"props":369,"children":370},{},[371,376],{"type":39,"tag":98,"props":372,"children":373},{},[374],{"type":45,"value":375},"ECS\u002FEC2 metadata",{"type":45,"value":377},": container metadata env vars or IMDS on EC2.",{"type":39,"tag":54,"props":379,"children":381},{"id":380},"known-cline-cli-bedrock-failure-modes",[382],{"type":45,"value":383},"Known Cline CLI Bedrock failure modes",{"type":39,"tag":48,"props":385,"children":386},{},[387],{"type":45,"value":388},"Use these as recognition patterns, not as code-change recommendations:",{"type":39,"tag":390,"props":391,"children":392},"table",{},[393,417],{"type":39,"tag":394,"props":395,"children":396},"thead",{},[397],{"type":39,"tag":398,"props":399,"children":400},"tr",{},[401,407,412],{"type":39,"tag":402,"props":403,"children":404},"th",{},[405],{"type":45,"value":406},"Symptom",{"type":39,"tag":402,"props":408,"children":409},{},[410],{"type":45,"value":411},"Likely cause",{"type":39,"tag":402,"props":413,"children":414},{},[415],{"type":45,"value":416},"User-facing fix",{"type":39,"tag":418,"props":419,"children":420},"tbody",{},[421,452,470,533,579,597,615],{"type":39,"tag":398,"props":422,"children":423},{},[424,434,439],{"type":39,"tag":425,"props":426,"children":427},"td",{},[428],{"type":39,"tag":74,"props":429,"children":431},{"className":430},[],[432],{"type":45,"value":433},"AWS region setting is missing. Pass it using the 'region' parameter or the AWS_REGION environment variable.",{"type":39,"tag":425,"props":435,"children":436},{},[437],{"type":45,"value":438},"Older CLI provider path did not forward Bedrock region\u002Foptions to the gateway (#10770; fixed by PR #10807 \u002F related #10818).",{"type":39,"tag":425,"props":440,"children":441},{},[442,444,450],{"type":45,"value":443},"Upgrade Cline CLI. Work around by exporting ",{"type":39,"tag":74,"props":445,"children":447},{"className":446},[],[448],{"type":45,"value":449},"AWS_REGION=\u003Cregion>",{"type":45,"value":451}," and reconfiguring Bedrock if upgrade is not possible.",{"type":39,"tag":398,"props":453,"children":454},{},[455,460,465],{"type":39,"tag":425,"props":456,"children":457},{},[458],{"type":45,"value":459},"Profile auth says provider configured, then no provider is ready",{"type":39,"tag":425,"props":461,"children":462},{},[463],{"type":45,"value":464},"Older readiness logic treated Bedrock like API-key-only (#6958).",{"type":39,"tag":425,"props":466,"children":467},{},[468],{"type":45,"value":469},"Upgrade Cline CLI and re-run Bedrock provider setup.",{"type":39,"tag":398,"props":471,"children":472},{},[473,488,500],{"type":39,"tag":425,"props":474,"children":475},{},[476,482,483],{"type":39,"tag":74,"props":477,"children":479},{"className":478},[],[480],{"type":45,"value":481},"AWS credential provider failed: Could not load credentials from any providers",{"type":45,"value":328},{"type":39,"tag":74,"props":484,"children":486},{"className":485},[],[487],{"type":45,"value":304},{"type":39,"tag":425,"props":489,"children":490},{},[491,493,498],{"type":45,"value":492},"Missing\u002Funsaved profile name, shared config not loaded, bad ",{"type":39,"tag":74,"props":494,"children":496},{"className":495},[],[497],{"type":45,"value":304},{"type":45,"value":499},", or affected CLI build (#10930; PR #10932; legacy migration PR #10943).",{"type":39,"tag":425,"props":501,"children":502},{},[503,505,510,511,516,518,524,526,532],{"type":45,"value":504},"Upgrade Cline CLI; ensure ",{"type":39,"tag":74,"props":506,"children":508},{"className":507},[],[509],{"type":45,"value":231},{"type":45,"value":167},{"type":39,"tag":74,"props":512,"children":514},{"className":513},[],[515],{"type":45,"value":239},{"type":45,"value":517}," names the profile; try ",{"type":39,"tag":74,"props":519,"children":521},{"className":520},[],[522],{"type":45,"value":523},"AWS_SDK_LOAD_CONFIG=1",{"type":45,"value":525},"; verify ",{"type":39,"tag":74,"props":527,"children":529},{"className":528},[],[530],{"type":45,"value":531},"aws sts get-caller-identity --profile \u003Cprofile>",{"type":45,"value":175},{"type":39,"tag":398,"props":534,"children":535},{},[536,553,574],{"type":39,"tag":425,"props":537,"children":538},{},[539,541,546,548],{"type":45,"value":540},"Migrated config has ",{"type":39,"tag":74,"props":542,"children":544},{"className":543},[],[545],{"type":45,"value":223},{"type":45,"value":547}," but no ",{"type":39,"tag":74,"props":549,"children":551},{"className":550},[],[552],{"type":45,"value":231},{"type":39,"tag":425,"props":554,"children":555},{},[556,558,564,566,572],{"type":45,"value":557},"Legacy migration dropped ",{"type":39,"tag":74,"props":559,"children":561},{"className":560},[],[562],{"type":45,"value":563},"awsProfile",{"type":45,"value":565}," when old ",{"type":39,"tag":74,"props":567,"children":569},{"className":568},[],[570],{"type":45,"value":571},"awsUseProfile",{"type":45,"value":573}," was absent (#10943).",{"type":39,"tag":425,"props":575,"children":576},{},[577],{"type":45,"value":578},"Upgrade Cline CLI and re-run migration, or reconfigure Bedrock so the profile name is saved.",{"type":39,"tag":398,"props":580,"children":581},{},[582,587,592],{"type":39,"tag":425,"props":583,"children":584},{},[585],{"type":45,"value":586},"API-key Bedrock auth not recognized or mixed up with region env",{"type":39,"tag":425,"props":588,"children":589},{},[590],{"type":45,"value":591},"Older auth mapping before API-key alignment (#10731).",{"type":39,"tag":425,"props":593,"children":594},{},[595],{"type":45,"value":596},"Upgrade Cline CLI; confirm Cline config uses Bedrock API key auth and still has a region.",{"type":39,"tag":398,"props":598,"children":599},{},[600,605,610],{"type":39,"tag":425,"props":601,"children":602},{},[603],{"type":45,"value":604},"ACP\u002Feditor integration asks for Cline\u002FChatGPT auth even though CLI Bedrock works",{"type":39,"tag":425,"props":606,"children":607},{},[608],{"type":45,"value":609},"Older ACP auth readiness issue (#9404).",{"type":39,"tag":425,"props":611,"children":612},{},[613],{"type":45,"value":614},"Upgrade Cline CLI and verify ACP uses the same config directory.",{"type":39,"tag":398,"props":616,"children":617},{},[618,623,628],{"type":39,"tag":425,"props":619,"children":620},{},[621],{"type":45,"value":622},"Custom application inference profile ARN cannot be entered\u002Fused",{"type":39,"tag":425,"props":624,"children":625},{},[626],{"type":45,"value":627},"Older CLI model picker limitation (#9244\u002F#9271).",{"type":39,"tag":425,"props":629,"children":630},{},[631],{"type":45,"value":632},"Upgrade Cline CLI; use custom\u002FARN model entry flow if available.",{"type":39,"tag":54,"props":634,"children":636},{"id":635},"safe-diagnostics-workflow",[637],{"type":45,"value":638},"Safe diagnostics workflow",{"type":39,"tag":640,"props":641,"children":643},"h3",{"id":642},"_1-establish-versions-and-config-location",[644],{"type":45,"value":645},"1. Establish versions and config location",{"type":39,"tag":48,"props":647,"children":648},{},[649],{"type":45,"value":650},"Run safe read-only commands:",{"type":39,"tag":66,"props":652,"children":656},{"className":653,"code":654,"language":655,"meta":71,"style":71},"language-sh shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","cline --version 2>\u002Fdev\u002Fnull || npx cline --version 2>\u002Fdev\u002Fnull || true\nnode --version 2>\u002Fdev\u002Fnull || true\naws --version 2>\u002Fdev\u002Fnull || true\npwd\n","sh",[657],{"type":39,"tag":74,"props":658,"children":659},{"__ignoreMap":71},[660,725,754,782],{"type":39,"tag":661,"props":662,"children":665},"span",{"class":663,"line":664},"line",1,[666,671,677,683,688,693,698,703,707,711,715,719],{"type":39,"tag":661,"props":667,"children":669},{"style":668},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[670],{"type":45,"value":8},{"type":39,"tag":661,"props":672,"children":674},{"style":673},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[675],{"type":45,"value":676}," --version",{"type":39,"tag":661,"props":678,"children":680},{"style":679},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[681],{"type":45,"value":682}," 2>",{"type":39,"tag":661,"props":684,"children":685},{"style":673},[686],{"type":45,"value":687},"\u002Fdev\u002Fnull",{"type":39,"tag":661,"props":689,"children":690},{"style":679},[691],{"type":45,"value":692}," ||",{"type":39,"tag":661,"props":694,"children":695},{"style":668},[696],{"type":45,"value":697}," npx",{"type":39,"tag":661,"props":699,"children":700},{"style":673},[701],{"type":45,"value":702}," cline",{"type":39,"tag":661,"props":704,"children":705},{"style":673},[706],{"type":45,"value":676},{"type":39,"tag":661,"props":708,"children":709},{"style":679},[710],{"type":45,"value":682},{"type":39,"tag":661,"props":712,"children":713},{"style":673},[714],{"type":45,"value":687},{"type":39,"tag":661,"props":716,"children":717},{"style":679},[718],{"type":45,"value":692},{"type":39,"tag":661,"props":720,"children":722},{"style":721},"--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF",[723],{"type":45,"value":724}," true\n",{"type":39,"tag":661,"props":726,"children":728},{"class":663,"line":727},2,[729,734,738,742,746,750],{"type":39,"tag":661,"props":730,"children":731},{"style":668},[732],{"type":45,"value":733},"node",{"type":39,"tag":661,"props":735,"children":736},{"style":673},[737],{"type":45,"value":676},{"type":39,"tag":661,"props":739,"children":740},{"style":679},[741],{"type":45,"value":682},{"type":39,"tag":661,"props":743,"children":744},{"style":673},[745],{"type":45,"value":687},{"type":39,"tag":661,"props":747,"children":748},{"style":679},[749],{"type":45,"value":692},{"type":39,"tag":661,"props":751,"children":752},{"style":721},[753],{"type":45,"value":724},{"type":39,"tag":661,"props":755,"children":757},{"class":663,"line":756},3,[758,762,766,770,774,778],{"type":39,"tag":661,"props":759,"children":760},{"style":668},[761],{"type":45,"value":18},{"type":39,"tag":661,"props":763,"children":764},{"style":673},[765],{"type":45,"value":676},{"type":39,"tag":661,"props":767,"children":768},{"style":679},[769],{"type":45,"value":682},{"type":39,"tag":661,"props":771,"children":772},{"style":673},[773],{"type":45,"value":687},{"type":39,"tag":661,"props":775,"children":776},{"style":679},[777],{"type":45,"value":692},{"type":39,"tag":661,"props":779,"children":780},{"style":721},[781],{"type":45,"value":724},{"type":39,"tag":661,"props":783,"children":784},{"class":663,"line":26},[785],{"type":39,"tag":661,"props":786,"children":787},{"style":721},[788],{"type":45,"value":789},"pwd\n",{"type":39,"tag":48,"props":791,"children":792},{},[793,795,801,803,809],{"type":45,"value":794},"Ask whether the user runs Cline with ",{"type":39,"tag":74,"props":796,"children":798},{"className":797},[],[799],{"type":45,"value":800},"--config \u003Cdir>",{"type":45,"value":802},". If yes, inspect that config directory; otherwise inspect ",{"type":39,"tag":74,"props":804,"children":806},{"className":805},[],[807],{"type":45,"value":808},"~\u002F.cline\u002Fdata",{"type":45,"value":175},{"type":39,"tag":640,"props":811,"children":813},{"id":812},"_2-inspect-cline-provider-config-with-redaction",[814],{"type":45,"value":815},"2. Inspect Cline provider config with redaction",{"type":39,"tag":48,"props":817,"children":818},{},[819,821,827],{"type":45,"value":820},"Never print raw provider\u002Fsecrets files. Prefer ",{"type":39,"tag":74,"props":822,"children":824},{"className":823},[],[825],{"type":45,"value":826},"jq",{"type":45,"value":828},"; otherwise use Node.",{"type":39,"tag":66,"props":830,"children":832},{"className":653,"code":831,"language":655,"meta":71,"style":71},"CLINE_DATA_DIR=\"${CLINE_DATA_DIR:-$HOME\u002F.cline\u002Fdata}\"\nPROVIDERS=\"$CLINE_DATA_DIR\u002Fsettings\u002Fproviders.json\"\n\nif [ -f \"$PROVIDERS\" ] && command -v jq >\u002Fdev\u002Fnull 2>&1; then\n  jq '\n    def redact:\n      if type == \"object\" then\n        with_entries(if (.key|test(\"(?i)(key|secret|token|password|credential)\")) then .value=\"\u003Credacted>\" else .value=(.value|redact) end)\n      elif type == \"array\" then map(redact)\n      else . end;\n    .providers.bedrock.settings? | redact\n  ' \"$PROVIDERS\"\nelif [ -f \"$PROVIDERS\" ]; then\n  node -e '\n    const fs=require(\"fs\"); const p=process.argv[1];\n    const v=JSON.parse(fs.readFileSync(p,\"utf8\"));\n    const r=(x)=>Array.isArray(x)?x.map(r):x&&typeof x===\"object\"?Object.fromEntries(Object.entries(x).map(([k,v])=>[k,\u002F(key|secret|token|password|credential)\u002Fi.test(k)?\"\u003Credacted>\":r(v)])):x;\n    console.log(JSON.stringify(r(v.providers?.bedrock?.settings), null, 2));\n  ' \"$PROVIDERS\"\nelse\n  echo \"No providers.json at $PROVIDERS\"\nfi\n",[833],{"type":39,"tag":74,"props":834,"children":835},{"__ignoreMap":71},[836,896,928,937,1014,1028,1037,1046,1055,1064,1072,1081,1102,1140,1158,1167,1176,1185,1194,1214,1223,1249],{"type":39,"tag":661,"props":837,"children":838},{"class":663,"line":664},[839,845,850,855,859,864,869,874,878,882,886,891],{"type":39,"tag":661,"props":840,"children":842},{"style":841},"--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8",[843],{"type":45,"value":844},"CLINE_DATA_DIR",{"type":39,"tag":661,"props":846,"children":847},{"style":679},[848],{"type":45,"value":849},"=",{"type":39,"tag":661,"props":851,"children":852},{"style":679},[853],{"type":45,"value":854},"\"${",{"type":39,"tag":661,"props":856,"children":857},{"style":841},[858],{"type":45,"value":844},{"type":39,"tag":661,"props":860,"children":861},{"style":679},[862],{"type":45,"value":863},":-",{"type":39,"tag":661,"props":865,"children":866},{"style":841},[867],{"type":45,"value":868},"$HOME",{"type":39,"tag":661,"props":870,"children":871},{"style":679},[872],{"type":45,"value":873},"\u002F",{"type":39,"tag":661,"props":875,"children":876},{"style":673},[877],{"type":45,"value":175},{"type":39,"tag":661,"props":879,"children":880},{"style":841},[881],{"type":45,"value":8},{"type":39,"tag":661,"props":883,"children":884},{"style":679},[885],{"type":45,"value":873},{"type":39,"tag":661,"props":887,"children":888},{"style":841},[889],{"type":45,"value":890},"data",{"type":39,"tag":661,"props":892,"children":893},{"style":679},[894],{"type":45,"value":895},"}\"\n",{"type":39,"tag":661,"props":897,"children":898},{"class":663,"line":727},[899,904,908,913,918,923],{"type":39,"tag":661,"props":900,"children":901},{"style":841},[902],{"type":45,"value":903},"PROVIDERS",{"type":39,"tag":661,"props":905,"children":906},{"style":679},[907],{"type":45,"value":849},{"type":39,"tag":661,"props":909,"children":910},{"style":679},[911],{"type":45,"value":912},"\"",{"type":39,"tag":661,"props":914,"children":915},{"style":841},[916],{"type":45,"value":917},"$CLINE_DATA_DIR",{"type":39,"tag":661,"props":919,"children":920},{"style":673},[921],{"type":45,"value":922},"\u002Fsettings\u002Fproviders.json",{"type":39,"tag":661,"props":924,"children":925},{"style":679},[926],{"type":45,"value":927},"\"\n",{"type":39,"tag":661,"props":929,"children":930},{"class":663,"line":756},[931],{"type":39,"tag":661,"props":932,"children":934},{"emptyLinePlaceholder":933},true,[935],{"type":45,"value":936},"\n",{"type":39,"tag":661,"props":938,"children":939},{"class":663,"line":26},[940,946,951,956,961,966,970,975,980,985,990,995,1000,1004,1009],{"type":39,"tag":661,"props":941,"children":943},{"style":942},"--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic",[944],{"type":45,"value":945},"if",{"type":39,"tag":661,"props":947,"children":948},{"style":679},[949],{"type":45,"value":950}," [",{"type":39,"tag":661,"props":952,"children":953},{"style":679},[954],{"type":45,"value":955}," -f",{"type":39,"tag":661,"props":957,"children":958},{"style":679},[959],{"type":45,"value":960}," \"",{"type":39,"tag":661,"props":962,"children":963},{"style":841},[964],{"type":45,"value":965},"$PROVIDERS",{"type":39,"tag":661,"props":967,"children":968},{"style":679},[969],{"type":45,"value":912},{"type":39,"tag":661,"props":971,"children":972},{"style":679},[973],{"type":45,"value":974}," ]",{"type":39,"tag":661,"props":976,"children":977},{"style":679},[978],{"type":45,"value":979}," &&",{"type":39,"tag":661,"props":981,"children":982},{"style":721},[983],{"type":45,"value":984}," command",{"type":39,"tag":661,"props":986,"children":987},{"style":673},[988],{"type":45,"value":989}," -v",{"type":39,"tag":661,"props":991,"children":992},{"style":673},[993],{"type":45,"value":994}," jq",{"type":39,"tag":661,"props":996,"children":997},{"style":679},[998],{"type":45,"value":999}," >",{"type":39,"tag":661,"props":1001,"children":1002},{"style":673},[1003],{"type":45,"value":687},{"type":39,"tag":661,"props":1005,"children":1006},{"style":679},[1007],{"type":45,"value":1008}," 2>&1;",{"type":39,"tag":661,"props":1010,"children":1011},{"style":942},[1012],{"type":45,"value":1013}," then\n",{"type":39,"tag":661,"props":1015,"children":1017},{"class":663,"line":1016},5,[1018,1023],{"type":39,"tag":661,"props":1019,"children":1020},{"style":668},[1021],{"type":45,"value":1022},"  jq",{"type":39,"tag":661,"props":1024,"children":1025},{"style":679},[1026],{"type":45,"value":1027}," '\n",{"type":39,"tag":661,"props":1029,"children":1031},{"class":663,"line":1030},6,[1032],{"type":39,"tag":661,"props":1033,"children":1034},{"style":673},[1035],{"type":45,"value":1036},"    def redact:\n",{"type":39,"tag":661,"props":1038,"children":1040},{"class":663,"line":1039},7,[1041],{"type":39,"tag":661,"props":1042,"children":1043},{"style":673},[1044],{"type":45,"value":1045},"      if type == \"object\" then\n",{"type":39,"tag":661,"props":1047,"children":1049},{"class":663,"line":1048},8,[1050],{"type":39,"tag":661,"props":1051,"children":1052},{"style":673},[1053],{"type":45,"value":1054},"        with_entries(if (.key|test(\"(?i)(key|secret|token|password|credential)\")) then .value=\"\u003Credacted>\" else .value=(.value|redact) end)\n",{"type":39,"tag":661,"props":1056,"children":1058},{"class":663,"line":1057},9,[1059],{"type":39,"tag":661,"props":1060,"children":1061},{"style":673},[1062],{"type":45,"value":1063},"      elif type == \"array\" then map(redact)\n",{"type":39,"tag":661,"props":1065,"children":1066},{"class":663,"line":22},[1067],{"type":39,"tag":661,"props":1068,"children":1069},{"style":673},[1070],{"type":45,"value":1071},"      else . end;\n",{"type":39,"tag":661,"props":1073,"children":1075},{"class":663,"line":1074},11,[1076],{"type":39,"tag":661,"props":1077,"children":1078},{"style":673},[1079],{"type":45,"value":1080},"    .providers.bedrock.settings? | redact\n",{"type":39,"tag":661,"props":1082,"children":1084},{"class":663,"line":1083},12,[1085,1090,1094,1098],{"type":39,"tag":661,"props":1086,"children":1087},{"style":679},[1088],{"type":45,"value":1089},"  '",{"type":39,"tag":661,"props":1091,"children":1092},{"style":679},[1093],{"type":45,"value":960},{"type":39,"tag":661,"props":1095,"children":1096},{"style":841},[1097],{"type":45,"value":965},{"type":39,"tag":661,"props":1099,"children":1100},{"style":679},[1101],{"type":45,"value":927},{"type":39,"tag":661,"props":1103,"children":1105},{"class":663,"line":1104},13,[1106,1111,1115,1119,1123,1127,1131,1136],{"type":39,"tag":661,"props":1107,"children":1108},{"style":942},[1109],{"type":45,"value":1110},"elif",{"type":39,"tag":661,"props":1112,"children":1113},{"style":679},[1114],{"type":45,"value":950},{"type":39,"tag":661,"props":1116,"children":1117},{"style":679},[1118],{"type":45,"value":955},{"type":39,"tag":661,"props":1120,"children":1121},{"style":679},[1122],{"type":45,"value":960},{"type":39,"tag":661,"props":1124,"children":1125},{"style":841},[1126],{"type":45,"value":965},{"type":39,"tag":661,"props":1128,"children":1129},{"style":679},[1130],{"type":45,"value":912},{"type":39,"tag":661,"props":1132,"children":1133},{"style":679},[1134],{"type":45,"value":1135}," ];",{"type":39,"tag":661,"props":1137,"children":1138},{"style":942},[1139],{"type":45,"value":1013},{"type":39,"tag":661,"props":1141,"children":1143},{"class":663,"line":1142},14,[1144,1149,1154],{"type":39,"tag":661,"props":1145,"children":1146},{"style":668},[1147],{"type":45,"value":1148},"  node",{"type":39,"tag":661,"props":1150,"children":1151},{"style":673},[1152],{"type":45,"value":1153}," -e",{"type":39,"tag":661,"props":1155,"children":1156},{"style":679},[1157],{"type":45,"value":1027},{"type":39,"tag":661,"props":1159,"children":1161},{"class":663,"line":1160},15,[1162],{"type":39,"tag":661,"props":1163,"children":1164},{"style":673},[1165],{"type":45,"value":1166},"    const fs=require(\"fs\"); const p=process.argv[1];\n",{"type":39,"tag":661,"props":1168,"children":1170},{"class":663,"line":1169},16,[1171],{"type":39,"tag":661,"props":1172,"children":1173},{"style":673},[1174],{"type":45,"value":1175},"    const v=JSON.parse(fs.readFileSync(p,\"utf8\"));\n",{"type":39,"tag":661,"props":1177,"children":1179},{"class":663,"line":1178},17,[1180],{"type":39,"tag":661,"props":1181,"children":1182},{"style":673},[1183],{"type":45,"value":1184},"    const r=(x)=>Array.isArray(x)?x.map(r):x&&typeof x===\"object\"?Object.fromEntries(Object.entries(x).map(([k,v])=>[k,\u002F(key|secret|token|password|credential)\u002Fi.test(k)?\"\u003Credacted>\":r(v)])):x;\n",{"type":39,"tag":661,"props":1186,"children":1188},{"class":663,"line":1187},18,[1189],{"type":39,"tag":661,"props":1190,"children":1191},{"style":673},[1192],{"type":45,"value":1193},"    console.log(JSON.stringify(r(v.providers?.bedrock?.settings), null, 2));\n",{"type":39,"tag":661,"props":1195,"children":1197},{"class":663,"line":1196},19,[1198,1202,1206,1210],{"type":39,"tag":661,"props":1199,"children":1200},{"style":679},[1201],{"type":45,"value":1089},{"type":39,"tag":661,"props":1203,"children":1204},{"style":679},[1205],{"type":45,"value":960},{"type":39,"tag":661,"props":1207,"children":1208},{"style":841},[1209],{"type":45,"value":965},{"type":39,"tag":661,"props":1211,"children":1212},{"style":679},[1213],{"type":45,"value":927},{"type":39,"tag":661,"props":1215,"children":1217},{"class":663,"line":1216},20,[1218],{"type":39,"tag":661,"props":1219,"children":1220},{"style":942},[1221],{"type":45,"value":1222},"else\n",{"type":39,"tag":661,"props":1224,"children":1226},{"class":663,"line":1225},21,[1227,1232,1236,1241,1245],{"type":39,"tag":661,"props":1228,"children":1229},{"style":721},[1230],{"type":45,"value":1231},"  echo",{"type":39,"tag":661,"props":1233,"children":1234},{"style":679},[1235],{"type":45,"value":960},{"type":39,"tag":661,"props":1237,"children":1238},{"style":673},[1239],{"type":45,"value":1240},"No providers.json at ",{"type":39,"tag":661,"props":1242,"children":1243},{"style":841},[1244],{"type":45,"value":965},{"type":39,"tag":661,"props":1246,"children":1247},{"style":679},[1248],{"type":45,"value":927},{"type":39,"tag":661,"props":1250,"children":1252},{"class":663,"line":1251},22,[1253],{"type":39,"tag":661,"props":1254,"children":1255},{"style":942},[1256],{"type":45,"value":1257},"fi\n",{"type":39,"tag":48,"props":1259,"children":1260},{},[1261],{"type":45,"value":1262},"Interpretation:",{"type":39,"tag":90,"props":1264,"children":1265},{},[1266,1284,1295,1329,1371,1389],{"type":39,"tag":94,"props":1267,"children":1268},{},[1269,1275,1277,1283],{"type":39,"tag":74,"props":1270,"children":1272},{"className":1271},[],[1273],{"type":45,"value":1274},"provider",{"type":45,"value":1276}," should be ",{"type":39,"tag":74,"props":1278,"children":1280},{"className":1279},[],[1281],{"type":45,"value":1282},"bedrock",{"type":45,"value":175},{"type":39,"tag":94,"props":1285,"children":1286},{},[1287,1293],{"type":39,"tag":74,"props":1288,"children":1290},{"className":1289},[],[1291],{"type":45,"value":1292},"model",{"type":45,"value":1294}," should be present.",{"type":39,"tag":94,"props":1296,"children":1297},{},[1298,1304,1306,1312,1314,1320,1321,1327],{"type":39,"tag":74,"props":1299,"children":1301},{"className":1300},[],[1302],{"type":45,"value":1303},"aws.region",{"type":45,"value":1305}," or top-level ",{"type":39,"tag":74,"props":1307,"children":1309},{"className":1308},[],[1310],{"type":45,"value":1311},"region",{"type":45,"value":1313}," should be present unless ",{"type":39,"tag":74,"props":1315,"children":1317},{"className":1316},[],[1318],{"type":45,"value":1319},"AWS_REGION",{"type":45,"value":873},{"type":39,"tag":74,"props":1322,"children":1324},{"className":1323},[],[1325],{"type":45,"value":1326},"AWS_DEFAULT_REGION",{"type":45,"value":1328}," supplies it.",{"type":39,"tag":94,"props":1330,"children":1331},{},[1332,1334,1340,1342,1348,1350,1355,1357,1362,1364,1369],{"type":45,"value":1333},"If ",{"type":39,"tag":74,"props":1335,"children":1337},{"className":1336},[],[1338],{"type":45,"value":1339},"aws.authentication",{"type":45,"value":1341}," is ",{"type":39,"tag":74,"props":1343,"children":1345},{"className":1344},[],[1346],{"type":45,"value":1347},"profile",{"type":45,"value":1349}," but there is no ",{"type":39,"tag":74,"props":1351,"children":1353},{"className":1352},[],[1354],{"type":45,"value":231},{"type":45,"value":1356}," and no ",{"type":39,"tag":74,"props":1358,"children":1360},{"className":1359},[],[1361],{"type":45,"value":239},{"type":45,"value":1363},", Cline will probably use the default AWS SDK credential chain. ",{"type":39,"tag":98,"props":1365,"children":1366},{},[1367],{"type":45,"value":1368},"This is not a failure mode by itself.",{"type":45,"value":1370}," Treat it as healthy if the default-chain AWS identity and Bedrock checks succeed.",{"type":39,"tag":94,"props":1372,"children":1373},{},[1374,1375,1380,1381,1387],{"type":45,"value":1333},{"type":39,"tag":74,"props":1376,"children":1378},{"className":1377},[],[1379],{"type":45,"value":1339},{"type":45,"value":1341},{"type":39,"tag":74,"props":1382,"children":1384},{"className":1383},[],[1385],{"type":45,"value":1386},"iam",{"type":45,"value":1388},", Cline is likely using the default AWS SDK chain.",{"type":39,"tag":94,"props":1390,"children":1391},{},[1392,1393,1398,1400,1405,1406,1412],{"type":45,"value":1333},{"type":39,"tag":74,"props":1394,"children":1396},{"className":1395},[],[1397],{"type":45,"value":165},{"type":45,"value":1399}," is present or ",{"type":39,"tag":74,"props":1401,"children":1403},{"className":1402},[],[1404],{"type":45,"value":1339},{"type":45,"value":1341},{"type":39,"tag":74,"props":1407,"children":1409},{"className":1408},[],[1410],{"type":45,"value":1411},"api-key",{"type":45,"value":1413},", this is Bedrock API key auth; AWS IAM profile checks may not apply, but region still does.",{"type":39,"tag":48,"props":1415,"children":1416},{},[1417],{"type":45,"value":1418},"Also inspect legacy files only with redaction\u002Fkey-presence checks if migration is suspected:",{"type":39,"tag":66,"props":1420,"children":1422},{"className":653,"code":1421,"language":655,"meta":71,"style":71},"LEGACY=\"$CLINE_DATA_DIR\u002FglobalState.json\"\nSECRETS=\"$CLINE_DATA_DIR\u002Fsecrets.json\"\n[ -f \"$LEGACY\" ] && jq '{awsRegion, awsAuthentication, awsUseProfile, awsProfile, awsUseCrossRegionInference, awsUseGlobalInference, awsBedrockUsePromptCache}' \"$LEGACY\" 2>\u002Fdev\u002Fnull || true\n[ -f \"$SECRETS\" ] && jq 'keys | map(select(test(\"(?i)(aws|bedrock)\")))' \"$SECRETS\" 2>\u002Fdev\u002Fnull || true\n",[1423],{"type":39,"tag":74,"props":1424,"children":1425},{"__ignoreMap":71},[1426,1455,1484,1564],{"type":39,"tag":661,"props":1427,"children":1428},{"class":663,"line":664},[1429,1434,1438,1442,1446,1451],{"type":39,"tag":661,"props":1430,"children":1431},{"style":841},[1432],{"type":45,"value":1433},"LEGACY",{"type":39,"tag":661,"props":1435,"children":1436},{"style":679},[1437],{"type":45,"value":849},{"type":39,"tag":661,"props":1439,"children":1440},{"style":679},[1441],{"type":45,"value":912},{"type":39,"tag":661,"props":1443,"children":1444},{"style":841},[1445],{"type":45,"value":917},{"type":39,"tag":661,"props":1447,"children":1448},{"style":673},[1449],{"type":45,"value":1450},"\u002FglobalState.json",{"type":39,"tag":661,"props":1452,"children":1453},{"style":679},[1454],{"type":45,"value":927},{"type":39,"tag":661,"props":1456,"children":1457},{"class":663,"line":727},[1458,1463,1467,1471,1475,1480],{"type":39,"tag":661,"props":1459,"children":1460},{"style":841},[1461],{"type":45,"value":1462},"SECRETS",{"type":39,"tag":661,"props":1464,"children":1465},{"style":679},[1466],{"type":45,"value":849},{"type":39,"tag":661,"props":1468,"children":1469},{"style":679},[1470],{"type":45,"value":912},{"type":39,"tag":661,"props":1472,"children":1473},{"style":841},[1474],{"type":45,"value":917},{"type":39,"tag":661,"props":1476,"children":1477},{"style":673},[1478],{"type":45,"value":1479},"\u002Fsecrets.json",{"type":39,"tag":661,"props":1481,"children":1482},{"style":679},[1483],{"type":45,"value":927},{"type":39,"tag":661,"props":1485,"children":1486},{"class":663,"line":756},[1487,1492,1496,1500,1505,1509,1513,1517,1521,1526,1531,1536,1540,1544,1548,1552,1556,1560],{"type":39,"tag":661,"props":1488,"children":1489},{"style":679},[1490],{"type":45,"value":1491},"[",{"type":39,"tag":661,"props":1493,"children":1494},{"style":679},[1495],{"type":45,"value":955},{"type":39,"tag":661,"props":1497,"children":1498},{"style":679},[1499],{"type":45,"value":960},{"type":39,"tag":661,"props":1501,"children":1502},{"style":841},[1503],{"type":45,"value":1504},"$LEGACY",{"type":39,"tag":661,"props":1506,"children":1507},{"style":679},[1508],{"type":45,"value":912},{"type":39,"tag":661,"props":1510,"children":1511},{"style":679},[1512],{"type":45,"value":974},{"type":39,"tag":661,"props":1514,"children":1515},{"style":679},[1516],{"type":45,"value":979},{"type":39,"tag":661,"props":1518,"children":1519},{"style":668},[1520],{"type":45,"value":994},{"type":39,"tag":661,"props":1522,"children":1523},{"style":679},[1524],{"type":45,"value":1525}," '",{"type":39,"tag":661,"props":1527,"children":1528},{"style":673},[1529],{"type":45,"value":1530},"{awsRegion, awsAuthentication, awsUseProfile, awsProfile, awsUseCrossRegionInference, awsUseGlobalInference, awsBedrockUsePromptCache}",{"type":39,"tag":661,"props":1532,"children":1533},{"style":679},[1534],{"type":45,"value":1535},"'",{"type":39,"tag":661,"props":1537,"children":1538},{"style":679},[1539],{"type":45,"value":960},{"type":39,"tag":661,"props":1541,"children":1542},{"style":841},[1543],{"type":45,"value":1504},{"type":39,"tag":661,"props":1545,"children":1546},{"style":679},[1547],{"type":45,"value":912},{"type":39,"tag":661,"props":1549,"children":1550},{"style":679},[1551],{"type":45,"value":682},{"type":39,"tag":661,"props":1553,"children":1554},{"style":673},[1555],{"type":45,"value":687},{"type":39,"tag":661,"props":1557,"children":1558},{"style":679},[1559],{"type":45,"value":692},{"type":39,"tag":661,"props":1561,"children":1562},{"style":721},[1563],{"type":45,"value":724},{"type":39,"tag":661,"props":1565,"children":1566},{"class":663,"line":26},[1567,1571,1575,1579,1584,1588,1592,1596,1600,1604,1609,1613,1617,1621,1625,1629,1633,1637],{"type":39,"tag":661,"props":1568,"children":1569},{"style":679},[1570],{"type":45,"value":1491},{"type":39,"tag":661,"props":1572,"children":1573},{"style":679},[1574],{"type":45,"value":955},{"type":39,"tag":661,"props":1576,"children":1577},{"style":679},[1578],{"type":45,"value":960},{"type":39,"tag":661,"props":1580,"children":1581},{"style":841},[1582],{"type":45,"value":1583},"$SECRETS",{"type":39,"tag":661,"props":1585,"children":1586},{"style":679},[1587],{"type":45,"value":912},{"type":39,"tag":661,"props":1589,"children":1590},{"style":679},[1591],{"type":45,"value":974},{"type":39,"tag":661,"props":1593,"children":1594},{"style":679},[1595],{"type":45,"value":979},{"type":39,"tag":661,"props":1597,"children":1598},{"style":668},[1599],{"type":45,"value":994},{"type":39,"tag":661,"props":1601,"children":1602},{"style":679},[1603],{"type":45,"value":1525},{"type":39,"tag":661,"props":1605,"children":1606},{"style":673},[1607],{"type":45,"value":1608},"keys | map(select(test(\"(?i)(aws|bedrock)\")))",{"type":39,"tag":661,"props":1610,"children":1611},{"style":679},[1612],{"type":45,"value":1535},{"type":39,"tag":661,"props":1614,"children":1615},{"style":679},[1616],{"type":45,"value":960},{"type":39,"tag":661,"props":1618,"children":1619},{"style":841},[1620],{"type":45,"value":1583},{"type":39,"tag":661,"props":1622,"children":1623},{"style":679},[1624],{"type":45,"value":912},{"type":39,"tag":661,"props":1626,"children":1627},{"style":679},[1628],{"type":45,"value":682},{"type":39,"tag":661,"props":1630,"children":1631},{"style":673},[1632],{"type":45,"value":687},{"type":39,"tag":661,"props":1634,"children":1635},{"style":679},[1636],{"type":45,"value":692},{"type":39,"tag":661,"props":1638,"children":1639},{"style":721},[1640],{"type":45,"value":724},{"type":39,"tag":48,"props":1642,"children":1643},{},[1644,1646,1652],{"type":45,"value":1645},"Do not print values from ",{"type":39,"tag":74,"props":1647,"children":1649},{"className":1648},[],[1650],{"type":45,"value":1651},"secrets.json",{"type":45,"value":175},{"type":39,"tag":640,"props":1654,"children":1656},{"id":1655},"_3-inspect-aws-environment-safely",[1657],{"type":45,"value":1658},"3. Inspect AWS environment safely",{"type":39,"tag":48,"props":1660,"children":1661},{},[1662],{"type":45,"value":1663},"Environment credentials can override profile\u002Fdefault-chain behavior. Print presence, not credential values:",{"type":39,"tag":66,"props":1665,"children":1667},{"className":653,"code":1666,"language":655,"meta":71,"style":71},"python3 - \u003C\u003C'PY'\nimport os, re\nsafe = [\"AWS_PROFILE\",\"AWS_REGION\",\"AWS_DEFAULT_REGION\",\"AWS_CONFIG_FILE\",\"AWS_SHARED_CREDENTIALS_FILE\",\"AWS_SDK_LOAD_CONFIG\"]\nsecretish = [\"AWS_ACCESS_KEY_ID\",\"AWS_SECRET_ACCESS_KEY\",\"AWS_SESSION_TOKEN\",\"AWS_SECURITY_TOKEN\"]\nfor k in safe:\n    if k in os.environ:\n        print(f\"{k}={os.environ[k]}\")\nfor k in secretish:\n    if k in os.environ:\n        print(f\"{k}=\u003Cset redacted>\")\nfor k in [\"AWS_ROLE_ARN\",\"AWS_WEB_IDENTITY_TOKEN_FILE\",\"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\",\"AWS_CONTAINER_CREDENTIALS_FULL_URI\"]:\n    if k in os.environ:\n        v = os.environ[k]\n        if k == \"AWS_ROLE_ARN\": v = re.sub(r\"arn:aws[a-z-]*:iam::\\d{12}:\", \"arn:aws:iam::\u003Caccount>:\", v)\n        print(f\"{k}={v}\")\nPY\n",[1668],{"type":39,"tag":74,"props":1669,"children":1670},{"__ignoreMap":71},[1671,1694,1702,1710,1718,1726,1734,1742,1750,1757,1765,1773,1780,1788,1796,1804],{"type":39,"tag":661,"props":1672,"children":1673},{"class":663,"line":664},[1674,1679,1684,1689],{"type":39,"tag":661,"props":1675,"children":1676},{"style":668},[1677],{"type":45,"value":1678},"python3",{"type":39,"tag":661,"props":1680,"children":1681},{"style":673},[1682],{"type":45,"value":1683}," -",{"type":39,"tag":661,"props":1685,"children":1686},{"style":679},[1687],{"type":45,"value":1688}," \u003C\u003C",{"type":39,"tag":661,"props":1690,"children":1691},{"style":679},[1692],{"type":45,"value":1693},"'PY'\n",{"type":39,"tag":661,"props":1695,"children":1696},{"class":663,"line":727},[1697],{"type":39,"tag":661,"props":1698,"children":1699},{"style":673},[1700],{"type":45,"value":1701},"import os, re\n",{"type":39,"tag":661,"props":1703,"children":1704},{"class":663,"line":756},[1705],{"type":39,"tag":661,"props":1706,"children":1707},{"style":673},[1708],{"type":45,"value":1709},"safe = [\"AWS_PROFILE\",\"AWS_REGION\",\"AWS_DEFAULT_REGION\",\"AWS_CONFIG_FILE\",\"AWS_SHARED_CREDENTIALS_FILE\",\"AWS_SDK_LOAD_CONFIG\"]\n",{"type":39,"tag":661,"props":1711,"children":1712},{"class":663,"line":26},[1713],{"type":39,"tag":661,"props":1714,"children":1715},{"style":673},[1716],{"type":45,"value":1717},"secretish = [\"AWS_ACCESS_KEY_ID\",\"AWS_SECRET_ACCESS_KEY\",\"AWS_SESSION_TOKEN\",\"AWS_SECURITY_TOKEN\"]\n",{"type":39,"tag":661,"props":1719,"children":1720},{"class":663,"line":1016},[1721],{"type":39,"tag":661,"props":1722,"children":1723},{"style":673},[1724],{"type":45,"value":1725},"for k in safe:\n",{"type":39,"tag":661,"props":1727,"children":1728},{"class":663,"line":1030},[1729],{"type":39,"tag":661,"props":1730,"children":1731},{"style":673},[1732],{"type":45,"value":1733},"    if k in os.environ:\n",{"type":39,"tag":661,"props":1735,"children":1736},{"class":663,"line":1039},[1737],{"type":39,"tag":661,"props":1738,"children":1739},{"style":673},[1740],{"type":45,"value":1741},"        print(f\"{k}={os.environ[k]}\")\n",{"type":39,"tag":661,"props":1743,"children":1744},{"class":663,"line":1048},[1745],{"type":39,"tag":661,"props":1746,"children":1747},{"style":673},[1748],{"type":45,"value":1749},"for k in secretish:\n",{"type":39,"tag":661,"props":1751,"children":1752},{"class":663,"line":1057},[1753],{"type":39,"tag":661,"props":1754,"children":1755},{"style":673},[1756],{"type":45,"value":1733},{"type":39,"tag":661,"props":1758,"children":1759},{"class":663,"line":22},[1760],{"type":39,"tag":661,"props":1761,"children":1762},{"style":673},[1763],{"type":45,"value":1764},"        print(f\"{k}=\u003Cset redacted>\")\n",{"type":39,"tag":661,"props":1766,"children":1767},{"class":663,"line":1074},[1768],{"type":39,"tag":661,"props":1769,"children":1770},{"style":673},[1771],{"type":45,"value":1772},"for k in [\"AWS_ROLE_ARN\",\"AWS_WEB_IDENTITY_TOKEN_FILE\",\"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI\",\"AWS_CONTAINER_CREDENTIALS_FULL_URI\"]:\n",{"type":39,"tag":661,"props":1774,"children":1775},{"class":663,"line":1083},[1776],{"type":39,"tag":661,"props":1777,"children":1778},{"style":673},[1779],{"type":45,"value":1733},{"type":39,"tag":661,"props":1781,"children":1782},{"class":663,"line":1104},[1783],{"type":39,"tag":661,"props":1784,"children":1785},{"style":673},[1786],{"type":45,"value":1787},"        v = os.environ[k]\n",{"type":39,"tag":661,"props":1789,"children":1790},{"class":663,"line":1142},[1791],{"type":39,"tag":661,"props":1792,"children":1793},{"style":673},[1794],{"type":45,"value":1795},"        if k == \"AWS_ROLE_ARN\": v = re.sub(r\"arn:aws[a-z-]*:iam::\\d{12}:\", \"arn:aws:iam::\u003Caccount>:\", v)\n",{"type":39,"tag":661,"props":1797,"children":1798},{"class":663,"line":1160},[1799],{"type":39,"tag":661,"props":1800,"children":1801},{"style":673},[1802],{"type":45,"value":1803},"        print(f\"{k}={v}\")\n",{"type":39,"tag":661,"props":1805,"children":1806},{"class":663,"line":1169},[1807],{"type":39,"tag":661,"props":1808,"children":1809},{"style":679},[1810],{"type":45,"value":1811},"PY\n",{"type":39,"tag":48,"props":1813,"children":1814},{},[1815],{"type":45,"value":1816},"Flag these issues:",{"type":39,"tag":90,"props":1818,"children":1819},{},[1820,1838,1855,1860],{"type":39,"tag":94,"props":1821,"children":1822},{},[1823,1829,1830,1836],{"type":39,"tag":74,"props":1824,"children":1826},{"className":1825},[],[1827],{"type":45,"value":1828},"AWS_ACCESS_KEY_ID",{"type":45,"value":873},{"type":39,"tag":74,"props":1831,"children":1833},{"className":1832},[],[1834],{"type":45,"value":1835},"AWS_SECRET_ACCESS_KEY",{"type":45,"value":1837}," are set unexpectedly: they can take precedence over profiles and point Cline at the wrong account.",{"type":39,"tag":94,"props":1839,"children":1840},{},[1841,1846,1848,1853],{"type":39,"tag":74,"props":1842,"children":1844},{"className":1843},[],[1845],{"type":45,"value":239},{"type":45,"value":1847}," differs from Cline ",{"type":39,"tag":74,"props":1849,"children":1851},{"className":1850},[],[1852],{"type":45,"value":231},{"type":45,"value":1854},": Cline should use the saved profile when present; otherwise environment\u002Fdefault chain may be used. Only treat this as a likely issue if the resolved identity\u002Faccount\u002Fregion is demonstrably wrong for the intended Bedrock access.",{"type":39,"tag":94,"props":1856,"children":1857},{},[1858],{"type":45,"value":1859},"No region in Cline config or env: Bedrock calls will fail.",{"type":39,"tag":94,"props":1861,"children":1862},{},[1863,1865,1871],{"type":45,"value":1864},"Temporary env keys are set without ",{"type":39,"tag":74,"props":1866,"children":1868},{"className":1867},[],[1869],{"type":45,"value":1870},"AWS_SESSION_TOKEN",{"type":45,"value":1872},": STS-derived credentials will fail.",{"type":39,"tag":640,"props":1874,"children":1876},{"id":1875},"_4-inspect-aws-configcredentials-files-without-secrets",[1877],{"type":45,"value":1878},"4. Inspect AWS config\u002Fcredentials files without secrets",{"type":39,"tag":48,"props":1880,"children":1881},{},[1882],{"type":45,"value":1883},"List profile sections and non-secret key names. Do not print access key values.",{"type":39,"tag":66,"props":1885,"children":1887},{"className":653,"code":1886,"language":655,"meta":71,"style":71},"AWS_CONFIG_FILE=\"${AWS_CONFIG_FILE:-$HOME\u002F.aws\u002Fconfig}\"\nAWS_SHARED_CREDENTIALS_FILE=\"${AWS_SHARED_CREDENTIALS_FILE:-$HOME\u002F.aws\u002Fcredentials}\"\n\nfor f in \"$AWS_CONFIG_FILE\" \"$AWS_SHARED_CREDENTIALS_FILE\"; do\n  echo \"--- $f ---\"\n  [ -f \"$f\" ] || { echo \"missing\"; continue; }\n  awk '\n    \u002F^\\[\u002F { section=$0; print section; next }\n    \u002F^[[:space:]]*(aws_access_key_id|aws_secret_access_key|aws_session_token)[[:space:]]*=\u002F { print \"  \" $1 \"=\u003Credacted>\"; next }\n    \u002F^[[:space:]]*(region|sso_session|sso_start_url|sso_region|sso_account_id|sso_role_name|role_arn|source_profile|credential_source|web_identity_token_file|credential_process)[[:space:]]*=\u002F {\n      key=$1; sub(\u002F[[:space:]]*=.*\u002F, \"\", key)\n      if (key ~ \u002Frole_arn\u002F) print \"  \" key \"=\u003Cpresent redacted>\";\n      else if (key ~ \u002Fcredential_process\u002F) print \"  \" key \"=\u003Cpresent redacted>\";\n      else print \"  \" $0\n    }\n  ' \"$f\"\ndone\n",[1888],{"type":39,"tag":74,"props":1889,"children":1890},{"__ignoreMap":71},[1891,1944,1997,2004,2058,2088,2161,2173,2181,2189,2197,2205,2213,2221,2229,2237,2256],{"type":39,"tag":661,"props":1892,"children":1893},{"class":663,"line":664},[1894,1899,1903,1907,1911,1915,1919,1923,1927,1931,1935,1940],{"type":39,"tag":661,"props":1895,"children":1896},{"style":841},[1897],{"type":45,"value":1898},"AWS_CONFIG_FILE",{"type":39,"tag":661,"props":1900,"children":1901},{"style":679},[1902],{"type":45,"value":849},{"type":39,"tag":661,"props":1904,"children":1905},{"style":679},[1906],{"type":45,"value":854},{"type":39,"tag":661,"props":1908,"children":1909},{"style":841},[1910],{"type":45,"value":1898},{"type":39,"tag":661,"props":1912,"children":1913},{"style":679},[1914],{"type":45,"value":863},{"type":39,"tag":661,"props":1916,"children":1917},{"style":841},[1918],{"type":45,"value":868},{"type":39,"tag":661,"props":1920,"children":1921},{"style":679},[1922],{"type":45,"value":873},{"type":39,"tag":661,"props":1924,"children":1925},{"style":673},[1926],{"type":45,"value":175},{"type":39,"tag":661,"props":1928,"children":1929},{"style":841},[1930],{"type":45,"value":18},{"type":39,"tag":661,"props":1932,"children":1933},{"style":679},[1934],{"type":45,"value":873},{"type":39,"tag":661,"props":1936,"children":1937},{"style":841},[1938],{"type":45,"value":1939},"config",{"type":39,"tag":661,"props":1941,"children":1942},{"style":679},[1943],{"type":45,"value":895},{"type":39,"tag":661,"props":1945,"children":1946},{"class":663,"line":727},[1947,1952,1956,1960,1964,1968,1972,1976,1980,1984,1988,1993],{"type":39,"tag":661,"props":1948,"children":1949},{"style":841},[1950],{"type":45,"value":1951},"AWS_SHARED_CREDENTIALS_FILE",{"type":39,"tag":661,"props":1953,"children":1954},{"style":679},[1955],{"type":45,"value":849},{"type":39,"tag":661,"props":1957,"children":1958},{"style":679},[1959],{"type":45,"value":854},{"type":39,"tag":661,"props":1961,"children":1962},{"style":841},[1963],{"type":45,"value":1951},{"type":39,"tag":661,"props":1965,"children":1966},{"style":679},[1967],{"type":45,"value":863},{"type":39,"tag":661,"props":1969,"children":1970},{"style":841},[1971],{"type":45,"value":868},{"type":39,"tag":661,"props":1973,"children":1974},{"style":679},[1975],{"type":45,"value":873},{"type":39,"tag":661,"props":1977,"children":1978},{"style":673},[1979],{"type":45,"value":175},{"type":39,"tag":661,"props":1981,"children":1982},{"style":841},[1983],{"type":45,"value":18},{"type":39,"tag":661,"props":1985,"children":1986},{"style":679},[1987],{"type":45,"value":873},{"type":39,"tag":661,"props":1989,"children":1990},{"style":841},[1991],{"type":45,"value":1992},"credentials",{"type":39,"tag":661,"props":1994,"children":1995},{"style":679},[1996],{"type":45,"value":895},{"type":39,"tag":661,"props":1998,"children":1999},{"class":663,"line":756},[2000],{"type":39,"tag":661,"props":2001,"children":2002},{"emptyLinePlaceholder":933},[2003],{"type":45,"value":936},{"type":39,"tag":661,"props":2005,"children":2006},{"class":663,"line":26},[2007,2012,2017,2022,2026,2031,2035,2039,2044,2048,2053],{"type":39,"tag":661,"props":2008,"children":2009},{"style":942},[2010],{"type":45,"value":2011},"for",{"type":39,"tag":661,"props":2013,"children":2014},{"style":841},[2015],{"type":45,"value":2016}," f ",{"type":39,"tag":661,"props":2018,"children":2019},{"style":942},[2020],{"type":45,"value":2021},"in",{"type":39,"tag":661,"props":2023,"children":2024},{"style":679},[2025],{"type":45,"value":960},{"type":39,"tag":661,"props":2027,"children":2028},{"style":841},[2029],{"type":45,"value":2030},"$AWS_CONFIG_FILE",{"type":39,"tag":661,"props":2032,"children":2033},{"style":679},[2034],{"type":45,"value":912},{"type":39,"tag":661,"props":2036,"children":2037},{"style":679},[2038],{"type":45,"value":960},{"type":39,"tag":661,"props":2040,"children":2041},{"style":841},[2042],{"type":45,"value":2043},"$AWS_SHARED_CREDENTIALS_FILE",{"type":39,"tag":661,"props":2045,"children":2046},{"style":679},[2047],{"type":45,"value":912},{"type":39,"tag":661,"props":2049,"children":2050},{"style":679},[2051],{"type":45,"value":2052},";",{"type":39,"tag":661,"props":2054,"children":2055},{"style":942},[2056],{"type":45,"value":2057}," do\n",{"type":39,"tag":661,"props":2059,"children":2060},{"class":663,"line":1016},[2061,2065,2069,2074,2079,2084],{"type":39,"tag":661,"props":2062,"children":2063},{"style":721},[2064],{"type":45,"value":1231},{"type":39,"tag":661,"props":2066,"children":2067},{"style":679},[2068],{"type":45,"value":960},{"type":39,"tag":661,"props":2070,"children":2071},{"style":673},[2072],{"type":45,"value":2073},"--- ",{"type":39,"tag":661,"props":2075,"children":2076},{"style":841},[2077],{"type":45,"value":2078},"$f",{"type":39,"tag":661,"props":2080,"children":2081},{"style":673},[2082],{"type":45,"value":2083}," ---",{"type":39,"tag":661,"props":2085,"children":2086},{"style":679},[2087],{"type":45,"value":927},{"type":39,"tag":661,"props":2089,"children":2090},{"class":663,"line":1030},[2091,2096,2100,2104,2108,2112,2116,2120,2125,2130,2134,2139,2143,2147,2152,2156],{"type":39,"tag":661,"props":2092,"children":2093},{"style":679},[2094],{"type":45,"value":2095},"  [",{"type":39,"tag":661,"props":2097,"children":2098},{"style":679},[2099],{"type":45,"value":955},{"type":39,"tag":661,"props":2101,"children":2102},{"style":679},[2103],{"type":45,"value":960},{"type":39,"tag":661,"props":2105,"children":2106},{"style":841},[2107],{"type":45,"value":2078},{"type":39,"tag":661,"props":2109,"children":2110},{"style":679},[2111],{"type":45,"value":912},{"type":39,"tag":661,"props":2113,"children":2114},{"style":679},[2115],{"type":45,"value":974},{"type":39,"tag":661,"props":2117,"children":2118},{"style":679},[2119],{"type":45,"value":692},{"type":39,"tag":661,"props":2121,"children":2122},{"style":679},[2123],{"type":45,"value":2124}," {",{"type":39,"tag":661,"props":2126,"children":2127},{"style":721},[2128],{"type":45,"value":2129}," echo",{"type":39,"tag":661,"props":2131,"children":2132},{"style":679},[2133],{"type":45,"value":960},{"type":39,"tag":661,"props":2135,"children":2136},{"style":673},[2137],{"type":45,"value":2138},"missing",{"type":39,"tag":661,"props":2140,"children":2141},{"style":679},[2142],{"type":45,"value":912},{"type":39,"tag":661,"props":2144,"children":2145},{"style":679},[2146],{"type":45,"value":2052},{"type":39,"tag":661,"props":2148,"children":2149},{"style":942},[2150],{"type":45,"value":2151}," continue",{"type":39,"tag":661,"props":2153,"children":2154},{"style":679},[2155],{"type":45,"value":2052},{"type":39,"tag":661,"props":2157,"children":2158},{"style":679},[2159],{"type":45,"value":2160}," }\n",{"type":39,"tag":661,"props":2162,"children":2163},{"class":663,"line":1039},[2164,2169],{"type":39,"tag":661,"props":2165,"children":2166},{"style":668},[2167],{"type":45,"value":2168},"  awk",{"type":39,"tag":661,"props":2170,"children":2171},{"style":679},[2172],{"type":45,"value":1027},{"type":39,"tag":661,"props":2174,"children":2175},{"class":663,"line":1048},[2176],{"type":39,"tag":661,"props":2177,"children":2178},{"style":673},[2179],{"type":45,"value":2180},"    \u002F^\\[\u002F { section=$0; print section; next }\n",{"type":39,"tag":661,"props":2182,"children":2183},{"class":663,"line":1057},[2184],{"type":39,"tag":661,"props":2185,"children":2186},{"style":673},[2187],{"type":45,"value":2188},"    \u002F^[[:space:]]*(aws_access_key_id|aws_secret_access_key|aws_session_token)[[:space:]]*=\u002F { print \"  \" $1 \"=\u003Credacted>\"; next }\n",{"type":39,"tag":661,"props":2190,"children":2191},{"class":663,"line":22},[2192],{"type":39,"tag":661,"props":2193,"children":2194},{"style":673},[2195],{"type":45,"value":2196},"    \u002F^[[:space:]]*(region|sso_session|sso_start_url|sso_region|sso_account_id|sso_role_name|role_arn|source_profile|credential_source|web_identity_token_file|credential_process)[[:space:]]*=\u002F {\n",{"type":39,"tag":661,"props":2198,"children":2199},{"class":663,"line":1074},[2200],{"type":39,"tag":661,"props":2201,"children":2202},{"style":673},[2203],{"type":45,"value":2204},"      key=$1; sub(\u002F[[:space:]]*=.*\u002F, \"\", key)\n",{"type":39,"tag":661,"props":2206,"children":2207},{"class":663,"line":1083},[2208],{"type":39,"tag":661,"props":2209,"children":2210},{"style":673},[2211],{"type":45,"value":2212},"      if (key ~ \u002Frole_arn\u002F) print \"  \" key \"=\u003Cpresent redacted>\";\n",{"type":39,"tag":661,"props":2214,"children":2215},{"class":663,"line":1104},[2216],{"type":39,"tag":661,"props":2217,"children":2218},{"style":673},[2219],{"type":45,"value":2220},"      else if (key ~ \u002Fcredential_process\u002F) print \"  \" key \"=\u003Cpresent redacted>\";\n",{"type":39,"tag":661,"props":2222,"children":2223},{"class":663,"line":1142},[2224],{"type":39,"tag":661,"props":2225,"children":2226},{"style":673},[2227],{"type":45,"value":2228},"      else print \"  \" $0\n",{"type":39,"tag":661,"props":2230,"children":2231},{"class":663,"line":1160},[2232],{"type":39,"tag":661,"props":2233,"children":2234},{"style":673},[2235],{"type":45,"value":2236},"    }\n",{"type":39,"tag":661,"props":2238,"children":2239},{"class":663,"line":1169},[2240,2244,2248,2252],{"type":39,"tag":661,"props":2241,"children":2242},{"style":679},[2243],{"type":45,"value":1089},{"type":39,"tag":661,"props":2245,"children":2246},{"style":679},[2247],{"type":45,"value":960},{"type":39,"tag":661,"props":2249,"children":2250},{"style":841},[2251],{"type":45,"value":2078},{"type":39,"tag":661,"props":2253,"children":2254},{"style":679},[2255],{"type":45,"value":927},{"type":39,"tag":661,"props":2257,"children":2258},{"class":663,"line":1178},[2259],{"type":39,"tag":661,"props":2260,"children":2261},{"style":942},[2262],{"type":45,"value":2263},"done\n",{"type":39,"tag":48,"props":2265,"children":2266},{},[2267],{"type":45,"value":1262},{"type":39,"tag":90,"props":2269,"children":2270},{},[2271,2307,2319,2332],{"type":39,"tag":94,"props":2272,"children":2273},{},[2274,2276,2282,2284,2290,2292,2298,2300,2306],{"type":45,"value":2275},"In ",{"type":39,"tag":74,"props":2277,"children":2279},{"className":2278},[],[2280],{"type":45,"value":2281},"~\u002F.aws\u002Fconfig",{"type":45,"value":2283},", named profiles are ",{"type":39,"tag":74,"props":2285,"children":2287},{"className":2286},[],[2288],{"type":45,"value":2289},"[profile name]",{"type":45,"value":2291},"; in ",{"type":39,"tag":74,"props":2293,"children":2295},{"className":2294},[],[2296],{"type":45,"value":2297},"~\u002F.aws\u002Fcredentials",{"type":45,"value":2299},", they are ",{"type":39,"tag":74,"props":2301,"children":2303},{"className":2302},[],[2304],{"type":45,"value":2305},"[name]",{"type":45,"value":175},{"type":39,"tag":94,"props":2308,"children":2309},{},[2310,2312,2317],{"type":45,"value":2311},"A profile with ",{"type":39,"tag":74,"props":2313,"children":2315},{"className":2314},[],[2316],{"type":45,"value":304},{"type":45,"value":2318}," should work through the AWS SDK chain in fixed CLI builds, but it must be the active profile.",{"type":39,"tag":94,"props":2320,"children":2321},{},[2322,2324,2330],{"type":45,"value":2323},"SSO profiles require a valid cached login: run ",{"type":39,"tag":74,"props":2325,"children":2327},{"className":2326},[],[2328],{"type":45,"value":2329},"aws sso login --profile \u003Cprofile>",{"type":45,"value":2331}," as the user if expired.",{"type":39,"tag":94,"props":2333,"children":2334},{},[2335],{"type":45,"value":2336},"Assume-role profiles require the source profile or credential source to be valid.",{"type":39,"tag":640,"props":2338,"children":2340},{"id":2339},"_5-validate-aws-identity-without-exposing-credentials",[2341],{"type":45,"value":2342},"5. Validate AWS identity without exposing credentials",{"type":39,"tag":48,"props":2344,"children":2345},{},[2346,2348,2354],{"type":45,"value":2347},"Use the likely profile and region. If no profile is configured, omit ",{"type":39,"tag":74,"props":2349,"children":2351},{"className":2350},[],[2352],{"type":45,"value":2353},"--profile",{"type":45,"value":2355}," to test the default chain.",{"type":39,"tag":66,"props":2357,"children":2359},{"className":653,"code":2358,"language":655,"meta":71,"style":71},"PROFILE_ARG=\"--profile \u003Cprofile>\"   # replace or leave empty for default chain\nREGION_ARG=\"--region \u003Cregion>\"      # replace with Cline\u002FAWS region\n\naws sts get-caller-identity $PROFILE_ARG --output json\naws configure list $PROFILE_ARG\n",[2360],{"type":39,"tag":74,"props":2361,"children":2362},{"__ignoreMap":71},[2363,2394,2424,2431,2463],{"type":39,"tag":661,"props":2364,"children":2365},{"class":663,"line":664},[2366,2371,2375,2379,2384,2388],{"type":39,"tag":661,"props":2367,"children":2368},{"style":841},[2369],{"type":45,"value":2370},"PROFILE_ARG",{"type":39,"tag":661,"props":2372,"children":2373},{"style":679},[2374],{"type":45,"value":849},{"type":39,"tag":661,"props":2376,"children":2377},{"style":679},[2378],{"type":45,"value":912},{"type":39,"tag":661,"props":2380,"children":2381},{"style":673},[2382],{"type":45,"value":2383},"--profile \u003Cprofile>",{"type":39,"tag":661,"props":2385,"children":2386},{"style":679},[2387],{"type":45,"value":912},{"type":39,"tag":661,"props":2389,"children":2391},{"style":2390},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[2392],{"type":45,"value":2393},"   # replace or leave empty for default chain\n",{"type":39,"tag":661,"props":2395,"children":2396},{"class":663,"line":727},[2397,2402,2406,2410,2415,2419],{"type":39,"tag":661,"props":2398,"children":2399},{"style":841},[2400],{"type":45,"value":2401},"REGION_ARG",{"type":39,"tag":661,"props":2403,"children":2404},{"style":679},[2405],{"type":45,"value":849},{"type":39,"tag":661,"props":2407,"children":2408},{"style":679},[2409],{"type":45,"value":912},{"type":39,"tag":661,"props":2411,"children":2412},{"style":673},[2413],{"type":45,"value":2414},"--region \u003Cregion>",{"type":39,"tag":661,"props":2416,"children":2417},{"style":679},[2418],{"type":45,"value":912},{"type":39,"tag":661,"props":2420,"children":2421},{"style":2390},[2422],{"type":45,"value":2423},"      # replace with Cline\u002FAWS region\n",{"type":39,"tag":661,"props":2425,"children":2426},{"class":663,"line":756},[2427],{"type":39,"tag":661,"props":2428,"children":2429},{"emptyLinePlaceholder":933},[2430],{"type":45,"value":936},{"type":39,"tag":661,"props":2432,"children":2433},{"class":663,"line":26},[2434,2438,2443,2448,2453,2458],{"type":39,"tag":661,"props":2435,"children":2436},{"style":668},[2437],{"type":45,"value":18},{"type":39,"tag":661,"props":2439,"children":2440},{"style":673},[2441],{"type":45,"value":2442}," sts",{"type":39,"tag":661,"props":2444,"children":2445},{"style":673},[2446],{"type":45,"value":2447}," get-caller-identity",{"type":39,"tag":661,"props":2449,"children":2450},{"style":841},[2451],{"type":45,"value":2452}," $PROFILE_ARG ",{"type":39,"tag":661,"props":2454,"children":2455},{"style":673},[2456],{"type":45,"value":2457},"--output",{"type":39,"tag":661,"props":2459,"children":2460},{"style":673},[2461],{"type":45,"value":2462}," json\n",{"type":39,"tag":661,"props":2464,"children":2465},{"class":663,"line":1016},[2466,2470,2475,2480],{"type":39,"tag":661,"props":2467,"children":2468},{"style":668},[2469],{"type":45,"value":18},{"type":39,"tag":661,"props":2471,"children":2472},{"style":673},[2473],{"type":45,"value":2474}," configure",{"type":39,"tag":661,"props":2476,"children":2477},{"style":673},[2478],{"type":45,"value":2479}," list",{"type":39,"tag":661,"props":2481,"children":2482},{"style":841},[2483],{"type":45,"value":2484}," $PROFILE_ARG\n",{"type":39,"tag":48,"props":2486,"children":2487},{},[2488,2494],{"type":39,"tag":74,"props":2489,"children":2491},{"className":2490},[],[2492],{"type":45,"value":2493},"get-caller-identity",{"type":45,"value":2495}," does not reveal secret credentials, but account IDs\u002Frole names can be sensitive. Redact them in the final report unless the user already shared them.",{"type":39,"tag":48,"props":2497,"children":2498},{},[2499],{"type":45,"value":2500},"Evaluation rules:",{"type":39,"tag":90,"props":2502,"children":2503},{},[2504,2524,2551,2563],{"type":39,"tag":94,"props":2505,"children":2506},{},[2507,2509,2515,2517,2522],{"type":45,"value":2508},"If Cline is using the default credential chain and ",{"type":39,"tag":74,"props":2510,"children":2512},{"className":2511},[],[2513],{"type":45,"value":2514},"aws sts get-caller-identity",{"type":45,"value":2516}," succeeds without ",{"type":39,"tag":74,"props":2518,"children":2520},{"className":2519},[],[2521],{"type":45,"value":2353},{"type":45,"value":2523},", that auth path looks good unless there is direct evidence that Cline runs in a different environment.",{"type":39,"tag":94,"props":2525,"children":2526},{},[2527,2528,2534,2536,2542,2544,2549],{"type":45,"value":1333},{"type":39,"tag":74,"props":2529,"children":2531},{"className":2530},[],[2532],{"type":45,"value":2533},"aws configure list",{"type":45,"value":2535}," reports credential source\u002Ftype as ",{"type":39,"tag":74,"props":2537,"children":2539},{"className":2538},[],[2540],{"type":45,"value":2541},"login",{"type":45,"value":2543}," and STS plus Bedrock list\u002Fget model calls succeed, treat the AWS CLI login\u002Fdefault-chain path as working. Do ",{"type":39,"tag":98,"props":2545,"children":2546},{},[2547],{"type":45,"value":2548},"not",{"type":45,"value":2550}," claim Cline cannot use it unless there is an actual Cline error or version-specific evidence.",{"type":39,"tag":94,"props":2552,"children":2553},{},[2554,2556,2561],{"type":45,"value":2555},"A missing saved ",{"type":39,"tag":74,"props":2557,"children":2559},{"className":2558},[],[2560],{"type":45,"value":231},{"type":45,"value":2562}," is only a problem when the user intended a specific non-default profile and the default-chain identity is wrong or cannot access Bedrock.",{"type":39,"tag":94,"props":2564,"children":2565},{},[2566,2568,2573,2575,2580,2581,2586],{"type":45,"value":2567},"Absence of ",{"type":39,"tag":74,"props":2569,"children":2571},{"className":2570},[],[2572],{"type":45,"value":2297},{"type":45,"value":2574},", SSO fields, ",{"type":39,"tag":74,"props":2576,"children":2578},{"className":2577},[],[2579],{"type":45,"value":304},{"type":45,"value":233},{"type":39,"tag":74,"props":2582,"children":2584},{"className":2583},[],[2585],{"type":45,"value":239},{"type":45,"value":2587}," is not a problem when another default-chain source resolves successfully.",{"type":39,"tag":48,"props":2589,"children":2590},{},[2591],{"type":45,"value":2592},"Fix guidance by failure:",{"type":39,"tag":90,"props":2594,"children":2595},{},[2596,2607,2626,2645],{"type":39,"tag":94,"props":2597,"children":2598},{},[2599,2601,2606],{"type":45,"value":2600},"SSO token expired: ",{"type":39,"tag":74,"props":2602,"children":2604},{"className":2603},[],[2605],{"type":45,"value":2329},{"type":45,"value":175},{"type":39,"tag":94,"props":2608,"children":2609},{},[2610,2612,2617,2619,2624],{"type":45,"value":2611},"Process provider failed: confirm the profile selected by Cline is the one with ",{"type":39,"tag":74,"props":2613,"children":2615},{"className":2614},[],[2616],{"type":45,"value":304},{"type":45,"value":2618},"; test ",{"type":39,"tag":74,"props":2620,"children":2622},{"className":2621},[],[2623],{"type":45,"value":531},{"type":45,"value":2625},"; ensure the process is executable and returns AWS process-credential JSON.",{"type":39,"tag":94,"props":2627,"children":2628},{},[2629,2631,2636,2638,2643],{"type":45,"value":2630},"Cannot find profile: set\u002Freconfigure Cline ",{"type":39,"tag":74,"props":2632,"children":2634},{"className":2633},[],[2635],{"type":45,"value":231},{"type":45,"value":2637},", export ",{"type":39,"tag":74,"props":2639,"children":2641},{"className":2640},[],[2642],{"type":45,"value":239},{"type":45,"value":2644},", or fix section names in AWS files.",{"type":39,"tag":94,"props":2646,"children":2647},{},[2648],{"type":45,"value":2649},"Env keys point to wrong account: unset them or launch Cline from a shell with the intended env.",{"type":39,"tag":640,"props":2651,"children":2653},{"id":2652},"_6-validate-bedrock-regionmodel-access-without-invoking-a-model",[2654],{"type":45,"value":2655},"6. Validate Bedrock region\u002Fmodel access without invoking a model",{"type":39,"tag":66,"props":2657,"children":2659},{"className":653,"code":2658,"language":655,"meta":71,"style":71},"aws bedrock list-foundation-models $PROFILE_ARG $REGION_ARG --by-output-modality TEXT --output table\n",[2660],{"type":39,"tag":74,"props":2661,"children":2662},{"__ignoreMap":71},[2663],{"type":39,"tag":661,"props":2664,"children":2665},{"class":663,"line":664},[2666,2670,2675,2680,2685,2690,2695,2700],{"type":39,"tag":661,"props":2667,"children":2668},{"style":668},[2669],{"type":45,"value":18},{"type":39,"tag":661,"props":2671,"children":2672},{"style":673},[2673],{"type":45,"value":2674}," bedrock",{"type":39,"tag":661,"props":2676,"children":2677},{"style":673},[2678],{"type":45,"value":2679}," list-foundation-models",{"type":39,"tag":661,"props":2681,"children":2682},{"style":841},[2683],{"type":45,"value":2684}," $PROFILE_ARG $REGION_ARG ",{"type":39,"tag":661,"props":2686,"children":2687},{"style":673},[2688],{"type":45,"value":2689},"--by-output-modality",{"type":39,"tag":661,"props":2691,"children":2692},{"style":673},[2693],{"type":45,"value":2694}," TEXT",{"type":39,"tag":661,"props":2696,"children":2697},{"style":673},[2698],{"type":45,"value":2699}," --output",{"type":39,"tag":661,"props":2701,"children":2702},{"style":673},[2703],{"type":45,"value":2704}," table\n",{"type":39,"tag":48,"props":2706,"children":2707},{},[2708],{"type":45,"value":2709},"If the selected model is known, also check availability where supported:",{"type":39,"tag":66,"props":2711,"children":2713},{"className":653,"code":2712,"language":655,"meta":71,"style":71},"aws bedrock get-foundation-model $PROFILE_ARG $REGION_ARG --model-identifier '\u003Cmodel-id>' --output json\n",[2714],{"type":39,"tag":74,"props":2715,"children":2716},{"__ignoreMap":71},[2717],{"type":39,"tag":661,"props":2718,"children":2719},{"class":663,"line":664},[2720,2724,2728,2733,2737,2742,2746,2751,2755,2759],{"type":39,"tag":661,"props":2721,"children":2722},{"style":668},[2723],{"type":45,"value":18},{"type":39,"tag":661,"props":2725,"children":2726},{"style":673},[2727],{"type":45,"value":2674},{"type":39,"tag":661,"props":2729,"children":2730},{"style":673},[2731],{"type":45,"value":2732}," get-foundation-model",{"type":39,"tag":661,"props":2734,"children":2735},{"style":841},[2736],{"type":45,"value":2684},{"type":39,"tag":661,"props":2738,"children":2739},{"style":673},[2740],{"type":45,"value":2741},"--model-identifier",{"type":39,"tag":661,"props":2743,"children":2744},{"style":679},[2745],{"type":45,"value":1525},{"type":39,"tag":661,"props":2747,"children":2748},{"style":673},[2749],{"type":45,"value":2750},"\u003Cmodel-id>",{"type":39,"tag":661,"props":2752,"children":2753},{"style":679},[2754],{"type":45,"value":1535},{"type":39,"tag":661,"props":2756,"children":2757},{"style":673},[2758],{"type":45,"value":2699},{"type":39,"tag":661,"props":2760,"children":2761},{"style":673},[2762],{"type":45,"value":2462},{"type":39,"tag":48,"props":2764,"children":2765},{},[2766],{"type":45,"value":2767},"Troubleshoot results:",{"type":39,"tag":90,"props":2769,"children":2770},{},[2771,2797,2802,2807,2812],{"type":39,"tag":94,"props":2772,"children":2773},{},[2774,2780,2782,2788,2789,2795],{"type":39,"tag":74,"props":2775,"children":2777},{"className":2776},[],[2778],{"type":45,"value":2779},"AccessDeniedException",{"type":45,"value":2781},": identity lacks ",{"type":39,"tag":74,"props":2783,"children":2785},{"className":2784},[],[2786],{"type":45,"value":2787},"bedrock:InvokeModel",{"type":45,"value":275},{"type":39,"tag":74,"props":2790,"children":2792},{"className":2791},[],[2793],{"type":45,"value":2794},"bedrock:InvokeModelWithResponseStream",{"type":45,"value":2796},", list\u002Fget model permissions, Marketplace\u002Fmodel access permissions, or an SCP\u002Fpermission boundary denies access.",{"type":39,"tag":94,"props":2798,"children":2799},{},[2800],{"type":45,"value":2801},"Model absent in region: choose a model\u002Finference profile available in that region, change region, or use a valid cross-region\u002Fglobal inference profile.",{"type":39,"tag":94,"props":2803,"children":2804},{},[2805],{"type":45,"value":2806},"Anthropic first-time access: complete Bedrock model access \u002F use-case form in the AWS account\u002Forganization. Marketplace permissions may be required for first-time enablement.",{"type":39,"tag":94,"props":2808,"children":2809},{},[2810],{"type":45,"value":2811},"GovCloud: third-party model access may need enablement in both linked commercial and GovCloud accounts; model availability differs by GovCloud region.",{"type":39,"tag":94,"props":2813,"children":2814},{},[2815],{"type":45,"value":2816},"Custom\u002Fapplication inference profile ARN: confirm the ARN region\u002Faccount match the configured region\u002Fprofile account and the identity can use that inference profile.",{"type":39,"tag":640,"props":2818,"children":2820},{"id":2819},"_7-rule-out-bedrock-errors-that-are-not-auth-problems",[2821],{"type":45,"value":2822},"7. Rule out Bedrock errors that are not auth problems",{"type":39,"tag":48,"props":2824,"children":2825},{},[2826],{"type":45,"value":2827},"If STS identity and Bedrock model listing work, do not force an auth diagnosis. Some Bedrock failures are request\u002Fhistory\u002Fmodel issues:",{"type":39,"tag":90,"props":2829,"children":2830},{},[2831,2842,2847,2858],{"type":39,"tag":94,"props":2832,"children":2833},{},[2834,2840],{"type":39,"tag":74,"props":2835,"children":2837},{"className":2836},[],[2838],{"type":45,"value":2839},"Invalid type for parameter ... image.source.bytes",{"type":45,"value":2841}," or screenshot\u002Fhistory replay failures: likely Bedrock image bytes serialization, not auth (#10926 \u002F PR #10928). Suggest upgrading Cline CLI and retrying a fresh task without replayed screenshot history.",{"type":39,"tag":94,"props":2843,"children":2844},{},[2845],{"type":45,"value":2846},"Context-window or token-limit errors that arrive as plain text: likely context overflow, not auth (#10838). Suggest compacting\u002Fstarting a fresh task or upgrading Cline CLI for improved detection.",{"type":39,"tag":94,"props":2848,"children":2849},{},[2850,2856],{"type":39,"tag":74,"props":2851,"children":2853},{"className":2852},[],[2854],{"type":45,"value":2855},"ValidationException",{"type":45,"value":2857}," for a model ID\u002FARN: often wrong region, unsupported model ID, missing inference profile, or using an application inference profile ARN with the wrong account\u002Fregion.",{"type":39,"tag":94,"props":2859,"children":2860},{},[2861],{"type":45,"value":2862},"Errors only after several successful turns usually indicate request content, history, model availability, quota, or context issues rather than credential resolution.",{"type":39,"tag":54,"props":2864,"children":2866},{"id":2865},"final-report-format",[2867],{"type":45,"value":2868},"Final report format",{"type":39,"tag":48,"props":2870,"children":2871},{},[2872],{"type":45,"value":2873},"Use one of two output modes.",{"type":39,"tag":640,"props":2875,"children":2877},{"id":2876},"normal-mode-default",[2878],{"type":45,"value":2879},"Normal mode (default)",{"type":39,"tag":48,"props":2881,"children":2882},{},[2883],{"type":45,"value":2884},"By default, keep the final answer concise and report only:",{"type":39,"tag":147,"props":2886,"children":2887},{},[2888,2898],{"type":39,"tag":94,"props":2889,"children":2890},{},[2891,2896],{"type":39,"tag":98,"props":2892,"children":2893},{},[2894],{"type":45,"value":2895},"Recommended user fixes or next checks",{"type":45,"value":2897},": commands or UI actions. Do not suggest Cline code changes. If everything looks good, recommend no changes or only optional next checks.",{"type":39,"tag":94,"props":2899,"children":2900},{},[2901,2906,2908],{"type":39,"tag":98,"props":2902,"children":2903},{},[2904],{"type":45,"value":2905},"Diagnosis",{"type":45,"value":2907},": one of exactly these two outcomes:\n",{"type":39,"tag":90,"props":2909,"children":2910},{},[2911,2928],{"type":39,"tag":94,"props":2912,"children":2913},{},[2914,2919,2921,2926],{"type":39,"tag":98,"props":2915,"children":2916},{},[2917],{"type":45,"value":2918},"Likely issue found",{"type":45,"value":2920},": concise bullets with evidence and severity. Use this only for issues likely to break Cline, such as missing region, failed STS\u002Fdefault-chain resolution, wrong account\u002Fidentity, expired SSO, failed ",{"type":39,"tag":74,"props":2922,"children":2924},{"className":2923},[],[2925],{"type":45,"value":304},{"type":45,"value":2927},", denied Bedrock access, unavailable selected model\u002Fregion, or a known affected Cline version paired with the matching symptom.",{"type":39,"tag":94,"props":2929,"children":2930},{},[2931,2936,2938,2943],{"type":39,"tag":98,"props":2932,"children":2933},{},[2934],{"type":45,"value":2935},"Looks good",{"type":45,"value":2937},": explicitly say the checked configuration\u002Fauth path looks good and no likely cause was found. Optionally include a short ",{"type":39,"tag":98,"props":2939,"children":2940},{},[2941],{"type":45,"value":2942},"Low-probability observations",{"type":45,"value":2944}," addition for minor or theoretical findings that are unlikely to be causing the user's current issue.",{"type":39,"tag":48,"props":2946,"children":2947},{},[2948,2950,2954],{"type":45,"value":2949},"The ",{"type":39,"tag":98,"props":2951,"children":2952},{},[2953],{"type":45,"value":2905},{"type":45,"value":2955}," must be the last section in the report. In the diagnosis text, tell the user to scroll up for remediation steps or optional next checks.",{"type":39,"tag":48,"props":2957,"children":2958},{},[2959,2961,2967,2968,2974],{"type":45,"value":2960},"At the end of normal-mode output, tell the user they can ask for deeper debugging information by saying something like: ",{"type":39,"tag":74,"props":2962,"children":2964},{"className":2963},[],[2965],{"type":45,"value":2966},"Show me Dr. Bedrock's deep debugging details",{"type":45,"value":167},{"type":39,"tag":74,"props":2969,"children":2971},{"className":2970},[],[2972],{"type":45,"value":2973},"Run Dr. Bedrock in verbose mode",{"type":45,"value":175},{"type":39,"tag":640,"props":2976,"children":2978},{"id":2977},"verbose-deep-debugging-mode",[2979],{"type":45,"value":2980},"Verbose \u002F deep debugging mode",{"type":39,"tag":48,"props":2982,"children":2983},{},[2984],{"type":45,"value":2985},"If the user asks for more information, verbose output, deep debugging details, or asks to see how Dr. Bedrock reached the conclusion, include sections 1–4 before the normal-mode sections:",{"type":39,"tag":147,"props":2987,"children":2988},{},[2989,2999,3009,3019,3029,3038],{"type":39,"tag":94,"props":2990,"children":2991},{},[2992,2997],{"type":39,"tag":98,"props":2993,"children":2994},{},[2995],{"type":45,"value":2996},"Likely auth scheme",{"type":45,"value":2998},": API key, direct IAM keys, named profile, default chain, SSO, credential_process, assume role, web identity, ECS\u002FEC2.",{"type":39,"tag":94,"props":3000,"children":3001},{},[3002,3007],{"type":39,"tag":98,"props":3003,"children":3004},{},[3005],{"type":45,"value":3006},"Cline CLI config status",{"type":45,"value":3008},": provider\u002Fmodel\u002Fregion present, auth fields present, profile saved or missing, likely affected by known CLI version issues.",{"type":39,"tag":94,"props":3010,"children":3011},{},[3012,3017],{"type":39,"tag":98,"props":3013,"children":3014},{},[3015],{"type":45,"value":3016},"AWS local auth status",{"type":45,"value":3018},": env precedence, profile\u002Fdefault-chain health, STS identity test result (redacted).",{"type":39,"tag":94,"props":3020,"children":3021},{},[3022,3027],{"type":39,"tag":98,"props":3023,"children":3024},{},[3025],{"type":45,"value":3026},"Bedrock access status",{"type":45,"value":3028},": region, model availability, permissions\u002Fmodel-access concerns.",{"type":39,"tag":94,"props":3030,"children":3031},{},[3032,3036],{"type":39,"tag":98,"props":3033,"children":3034},{},[3035],{"type":45,"value":2895},{"type":45,"value":3037},": same as normal mode.",{"type":39,"tag":94,"props":3039,"children":3040},{},[3041,3045],{"type":39,"tag":98,"props":3042,"children":3043},{},[3044],{"type":45,"value":2905},{"type":45,"value":3046},": same as normal mode and still the final section.",{"type":39,"tag":48,"props":3048,"children":3049},{},[3050,3052,3056,3058,3062,3064,3068,3070,3074],{"type":45,"value":3051},"Do ",{"type":39,"tag":98,"props":3053,"children":3054},{},[3055],{"type":45,"value":2548},{"type":45,"value":3057}," invent an issue just to have one. If the config is coherent, AWS identity resolves, region is set, and Bedrock model\u002Flist checks pass, conclude ",{"type":39,"tag":98,"props":3059,"children":3060},{},[3061],{"type":45,"value":2935},{"type":45,"value":3063},". If something is merely different from a named-profile setup but still resolves through the default credential chain, do not call it a problem. If you noticed possible concerns that are weakly related or unlikely, include them only as optional ",{"type":39,"tag":98,"props":3065,"children":3066},{},[3067],{"type":45,"value":2942},{"type":45,"value":3069}," within the ",{"type":39,"tag":98,"props":3071,"children":3072},{},[3073],{"type":45,"value":2935},{"type":45,"value":3075}," diagnosis rather than presenting them as root causes.",{"type":39,"tag":54,"props":3077,"children":3079},{"id":3078},"common-fix-snippets",[3080],{"type":45,"value":3081},"Common fix snippets",{"type":39,"tag":90,"props":3083,"children":3084},{},[3085,3132,3201,3290],{"type":39,"tag":94,"props":3086,"children":3087},{},[3088,3090],{"type":45,"value":3089},"Upgrade Cline CLI:\n",{"type":39,"tag":66,"props":3091,"children":3093},{"className":653,"code":3092,"language":655,"meta":71,"style":71},"npm install -g cline@latest\ncline --version\n",[3094],{"type":39,"tag":74,"props":3095,"children":3096},{"__ignoreMap":71},[3097,3120],{"type":39,"tag":661,"props":3098,"children":3099},{"class":663,"line":664},[3100,3105,3110,3115],{"type":39,"tag":661,"props":3101,"children":3102},{"style":668},[3103],{"type":45,"value":3104},"npm",{"type":39,"tag":661,"props":3106,"children":3107},{"style":673},[3108],{"type":45,"value":3109}," install",{"type":39,"tag":661,"props":3111,"children":3112},{"style":673},[3113],{"type":45,"value":3114}," -g",{"type":39,"tag":661,"props":3116,"children":3117},{"style":673},[3118],{"type":45,"value":3119}," cline@latest\n",{"type":39,"tag":661,"props":3121,"children":3122},{"class":663,"line":727},[3123,3127],{"type":39,"tag":661,"props":3124,"children":3125},{"style":668},[3126],{"type":45,"value":8},{"type":39,"tag":661,"props":3128,"children":3129},{"style":673},[3130],{"type":45,"value":3131}," --version\n",{"type":39,"tag":94,"props":3133,"children":3134},{},[3135,3137],{"type":45,"value":3136},"Launch with explicit profile\u002Fregion:\n",{"type":39,"tag":66,"props":3138,"children":3140},{"className":653,"code":3139,"language":655,"meta":71,"style":71},"AWS_PROFILE=\u003Cprofile> AWS_REGION=\u003Cregion> AWS_SDK_LOAD_CONFIG=1 cline\n",[3141],{"type":39,"tag":74,"props":3142,"children":3143},{"__ignoreMap":71},[3144],{"type":39,"tag":661,"props":3145,"children":3146},{"class":663,"line":664},[3147,3151,3156,3160,3165,3170,3174,3178,3182,3187,3191,3196],{"type":39,"tag":661,"props":3148,"children":3149},{"style":841},[3150],{"type":45,"value":239},{"type":39,"tag":661,"props":3152,"children":3153},{"style":679},[3154],{"type":45,"value":3155},"=\u003C",{"type":39,"tag":661,"props":3157,"children":3158},{"style":673},[3159],{"type":45,"value":1347},{"type":39,"tag":661,"props":3161,"children":3162},{"style":679},[3163],{"type":45,"value":3164},">",{"type":39,"tag":661,"props":3166,"children":3167},{"style":841},[3168],{"type":45,"value":3169}," AWS_REGION",{"type":39,"tag":661,"props":3171,"children":3172},{"style":679},[3173],{"type":45,"value":3155},{"type":39,"tag":661,"props":3175,"children":3176},{"style":673},[3177],{"type":45,"value":1311},{"type":39,"tag":661,"props":3179,"children":3180},{"style":679},[3181],{"type":45,"value":3164},{"type":39,"tag":661,"props":3183,"children":3184},{"style":841},[3185],{"type":45,"value":3186}," AWS_SDK_LOAD_CONFIG",{"type":39,"tag":661,"props":3188,"children":3189},{"style":679},[3190],{"type":45,"value":849},{"type":39,"tag":661,"props":3192,"children":3193},{"style":673},[3194],{"type":45,"value":3195},"1",{"type":39,"tag":661,"props":3197,"children":3198},{"style":668},[3199],{"type":45,"value":3200}," cline\n",{"type":39,"tag":94,"props":3202,"children":3203},{},[3204,3206],{"type":45,"value":3205},"Refresh SSO:\n",{"type":39,"tag":66,"props":3207,"children":3209},{"className":653,"code":3208,"language":655,"meta":71,"style":71},"aws sso login --profile \u003Cprofile>\naws sts get-caller-identity --profile \u003Cprofile>\n",[3210],{"type":39,"tag":74,"props":3211,"children":3212},{"__ignoreMap":71},[3213,3255],{"type":39,"tag":661,"props":3214,"children":3215},{"class":663,"line":664},[3216,3220,3225,3230,3235,3240,3245,3250],{"type":39,"tag":661,"props":3217,"children":3218},{"style":668},[3219],{"type":45,"value":18},{"type":39,"tag":661,"props":3221,"children":3222},{"style":673},[3223],{"type":45,"value":3224}," sso",{"type":39,"tag":661,"props":3226,"children":3227},{"style":673},[3228],{"type":45,"value":3229}," login",{"type":39,"tag":661,"props":3231,"children":3232},{"style":673},[3233],{"type":45,"value":3234}," --profile",{"type":39,"tag":661,"props":3236,"children":3237},{"style":679},[3238],{"type":45,"value":3239}," \u003C",{"type":39,"tag":661,"props":3241,"children":3242},{"style":673},[3243],{"type":45,"value":3244},"profil",{"type":39,"tag":661,"props":3246,"children":3247},{"style":841},[3248],{"type":45,"value":3249},"e",{"type":39,"tag":661,"props":3251,"children":3252},{"style":679},[3253],{"type":45,"value":3254},">\n",{"type":39,"tag":661,"props":3256,"children":3257},{"class":663,"line":727},[3258,3262,3266,3270,3274,3278,3282,3286],{"type":39,"tag":661,"props":3259,"children":3260},{"style":668},[3261],{"type":45,"value":18},{"type":39,"tag":661,"props":3263,"children":3264},{"style":673},[3265],{"type":45,"value":2442},{"type":39,"tag":661,"props":3267,"children":3268},{"style":673},[3269],{"type":45,"value":2447},{"type":39,"tag":661,"props":3271,"children":3272},{"style":673},[3273],{"type":45,"value":3234},{"type":39,"tag":661,"props":3275,"children":3276},{"style":679},[3277],{"type":45,"value":3239},{"type":39,"tag":661,"props":3279,"children":3280},{"style":673},[3281],{"type":45,"value":3244},{"type":39,"tag":661,"props":3283,"children":3284},{"style":841},[3285],{"type":45,"value":3249},{"type":39,"tag":661,"props":3287,"children":3288},{"style":679},[3289],{"type":45,"value":3254},{"type":39,"tag":94,"props":3291,"children":3292},{},[3293,3295,3314],{"type":45,"value":3294},"Reconfigure Bedrock in Cline CLI if saved profile\u002Fregion is missing:\n",{"type":39,"tag":66,"props":3296,"children":3298},{"className":653,"code":3297,"language":655,"meta":71,"style":71},"cline auth\n",[3299],{"type":39,"tag":74,"props":3300,"children":3301},{"__ignoreMap":71},[3302],{"type":39,"tag":661,"props":3303,"children":3304},{"class":663,"line":664},[3305,3309],{"type":39,"tag":661,"props":3306,"children":3307},{"style":668},[3308],{"type":45,"value":8},{"type":39,"tag":661,"props":3310,"children":3311},{"style":673},[3312],{"type":45,"value":3313}," auth\n",{"type":45,"value":3315},"\nChoose AWS Bedrock, leave API key blank for profile\u002Fdefault-chain auth, enter region, and enter the AWS profile name when prompted.",{"type":39,"tag":3317,"props":3318,"children":3319},"style",{},[3320],{"type":45,"value":3321},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":3323,"total":3518},[3324,3341,3361,3380,3397,3413,3432,3442,3454,3472,3492,3505],{"slug":3325,"name":3325,"fn":3326,"description":3327,"org":3328,"tags":3329,"stars":22,"repoUrl":23,"updatedAt":3340},"amazon-location-service","integrate Amazon Location Service APIs","Integrates Amazon Location Service APIs for AWS applications. Use this skill when users want to add maps (interactive MapLibre or static images); geocode addresses to coordinates or reverse geocode coordinates to addresses; calculate routes, travel times, or service areas; find places and businesses through text search, nearby search, or autocomplete suggestions; retrieve detailed place information including hours, contacts, and addresses; monitor geographical boundaries with geofences; or track device locations. Covers authentication, SDK integration, and all Amazon Location Service capabilities.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3330,3333,3334,3337],{"name":3331,"slug":3332,"type":15},"API Development","api-development",{"name":17,"slug":18,"type":15},{"name":3335,"slug":3336,"type":15},"Maps","maps",{"name":3338,"slug":3339,"type":15},"Navigation","navigation","2026-07-12T08:13:53.294026",{"slug":3342,"name":3342,"fn":3343,"description":3344,"org":3345,"tags":3346,"stars":22,"repoUrl":23,"updatedAt":3360},"amplify-workflow","build full-stack apps with AWS Amplify","Build and deploy full-stack web and mobile apps with AWS Amplify Gen2 (TypeScript code-first). Covers auth (Cognito), data (AppSync\u002FDynamoDB including schema modeling, enum types, relationships, authorization rules), storage (S3), functions, APIs, and AI (Amplify AI Kit with Bedrock). Supports React, Next.js, Vue, Angular, React Native, Flutter, Swift, and Android. Always use this skill for Amplify Gen2 topics — even for questions you think you know — it contains validated, version-specific patterns that prevent common mistakes. TRIGGER when: user mentions Amplify Gen2; project has amplify\u002F directory or amplify_outputs; code imports @aws-amplify packages; user asks about defineBackend, defineAuth, defineData, defineStorage, or npx ampx. SKIP: Amplify Gen1 (amplify CLI v6), standalone SAM\u002FCDK without Amplify (use aws-serverless), direct Bedrock without Amplify AI Kit (use bedrock).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3347,3350,3351,3354,3357],{"name":3348,"slug":3349,"type":15},"Auth","auth",{"name":17,"slug":18,"type":15},{"name":3352,"slug":3353,"type":15},"Database","database",{"name":3355,"slug":3356,"type":15},"Frontend","frontend",{"name":3358,"slug":3359,"type":15},"TypeScript","typescript","2026-07-12T08:13:47.134012",{"slug":3362,"name":3362,"fn":3363,"description":3364,"org":3365,"tags":3366,"stars":22,"repoUrl":23,"updatedAt":3379},"analyzer","analyze queried data for trends","Analyze queried data for trends, week-over-week comparisons, distributions, funnels, cohorts, top-N lists, anomalies, sanity checks, and report-ready findings. Use after or alongside ClickHouse queries when the user wants insight rather than raw rows.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3367,3370,3373,3376],{"name":3368,"slug":3369,"type":15},"Analytics","analytics",{"name":3371,"slug":3372,"type":15},"ClickHouse","clickhouse",{"name":3374,"slug":3375,"type":15},"Data Analysis","data-analysis",{"name":3377,"slug":3378,"type":15},"Statistics","statistics","2026-07-12T08:14:05.606036",{"slug":3381,"name":3381,"fn":3382,"description":3383,"org":3384,"tags":3385,"stars":22,"repoUrl":23,"updatedAt":3396},"artifact-management","manage and organize analysis artifacts","Save, organize, and describe reusable analysis artifacts such as SQL, result snapshots, CSV exports, summaries, caveats, plots, and report-ready files. Use when users ask to save, export, share, cite, reproduce, or organize data-analysis outputs.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3386,3387,3390,3393],{"name":3374,"slug":3375,"type":15},{"name":3388,"slug":3389,"type":15},"Productivity","productivity",{"name":3391,"slug":3392,"type":15},"Reporting","reporting",{"name":3394,"slug":3395,"type":15},"SQL","sql","2026-07-12T08:14:09.265555",{"slug":3398,"name":3398,"fn":3399,"description":3400,"org":3401,"tags":3402,"stars":22,"repoUrl":23,"updatedAt":3412},"attorney-assist","connect with attorneys for legal consultation","Connects the user with a LegalZoom attorney for legal consultation. Use when a user asks about attorneys, lawyers, or legal help, or when contract review reveals high risks or low-confidence findings.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3403,3406,3409],{"name":3404,"slug":3405,"type":15},"Contracts","contracts",{"name":3407,"slug":3408,"type":15},"Legal","legal",{"name":3410,"slug":3411,"type":15},"Risk Assessment","risk-assessment","2026-07-12T08:13:45.878361",{"slug":3414,"name":3414,"fn":3415,"description":3416,"org":3417,"tags":3418,"stars":22,"repoUrl":23,"updatedAt":3431},"building-pydantic-ai-agents","build AI agents with Pydantic AI","Build AI agents with Pydantic AI — tools, capabilities (including on-demand loading), structured output, streaming, testing, and multi-agent patterns. Use when the user mentions Pydantic AI, imports pydantic_ai, or asks to build an AI agent, add tools\u002Fcapabilities, defer capability loading, stream output, define agents from YAML, or test agent behavior.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3419,3422,3425,3428],{"name":3420,"slug":3421,"type":15},"Agents","agents",{"name":3423,"slug":3424,"type":15},"LLM","llm",{"name":3426,"slug":3427,"type":15},"Multi-Agent","multi-agent",{"name":3429,"slug":3430,"type":15},"Python","python","2026-07-12T08:14:01.893781",{"slug":3372,"name":3372,"fn":3433,"description":3434,"org":3435,"tags":3436,"stars":22,"repoUrl":23,"updatedAt":3441},"query ClickHouse databases via CLI","Connect to and query ClickHouse (a local server or a ClickHouse Cloud service) from the terminal using the official clickhousectl CLI, including the browser OAuth login flow. Use when the user wants to run SQL against ClickHouse, explore schemas and tables, inspect Cloud services, or authenticate clickhousectl. For building a local dev environment or deploying to Cloud, defer to the official ClickHouse skills (see Scope).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3437,3438,3439,3440],{"name":3368,"slug":3369,"type":15},{"name":13,"slug":14,"type":15},{"name":3371,"slug":3372,"type":15},{"name":3352,"slug":3353,"type":15},"2026-07-12T08:14:06.829692",{"slug":3443,"name":3443,"fn":3444,"description":3445,"org":3446,"tags":3447,"stars":22,"repoUrl":23,"updatedAt":3453},"cline-session-history","search and browse Cline session history","Search and browse Cline session history. Use when the user asks to find, list, inspect, or export Cline sessions by time period, prompt content, status, model, provider, source, mode, workspace, or other criteria. Also use when the user wants to read a session transcript or export sessions to a directory. Trigger phrases include \"find my session\", \"search my session history\", \"show me past sessions\", \"what was that session where\", \"find the session that started with\", and any mention of past Cline conversations.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3448,3449,3452],{"name":3420,"slug":3421,"type":15},{"name":3450,"slug":3451,"type":15},"History","history",{"name":3388,"slug":3389,"type":15},"2026-07-19T06:03:13.945151",{"slug":3455,"name":3455,"fn":3456,"description":3457,"org":3458,"tags":3459,"stars":22,"repoUrl":23,"updatedAt":3471},"convex-design","build reactive backends with Convex","Design and build reactive, type-safe, production-grade backends on Convex. Covers schema, queries\u002Fmutations\u002Factions, indexes, auth, file storage, scheduling, real-time multiplayer, mobile backends, and LLM\u002Fagent workflows on Convex's one-platform stack.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3460,3461,3464,3465,3468],{"name":3348,"slug":3349,"type":15},{"name":3462,"slug":3463,"type":15},"Backend","backend",{"name":3352,"slug":3353,"type":15},{"name":3466,"slug":3467,"type":15},"Real-time","real-time",{"name":3469,"slug":3470,"type":15},"Storage","storage","2026-07-12T08:13:37.101253",{"slug":3473,"name":3473,"fn":3474,"description":3475,"org":3476,"tags":3477,"stars":22,"repoUrl":23,"updatedAt":3491},"cosmosdb-best-practices","optimize Azure Cosmos DB performance","Azure Cosmos DB performance optimization and best practices guidelines for NoSQL,\npartitioning, queries, SDK usage, and vector search. Use when writing, reviewing,\nor refactoring code that interacts with Azure Cosmos DB, designing data models,\noptimizing queries, or implementing high-performance database operations.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3478,3481,3484,3485,3488],{"name":3479,"slug":3480,"type":15},"Azure","azure",{"name":3482,"slug":3483,"type":15},"Cosmos DB","cosmos-db",{"name":3352,"slug":3353,"type":15},{"name":3486,"slug":3487,"type":15},"NoSQL","nosql",{"name":3489,"slug":3490,"type":15},"Performance","performance","2026-07-12T08:13:54.531719",{"slug":3493,"name":3493,"fn":3494,"description":3495,"org":3496,"tags":3497,"stars":22,"repoUrl":23,"updatedAt":3504},"data-analyst","analyze ClickHouse analytics data","Act as an interactive data analyst for ClickHouse-backed analytics. Use when the user asks questions about internal data, metrics, dashboards, telemetry, active users, revenue, funnels, trends, distributions, or wants an analyst-style conversation, ad hoc SQL, charts, or a data export against ClickHouse (local or ClickHouse Cloud).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3498,3499,3500,3503],{"name":3368,"slug":3369,"type":15},{"name":3371,"slug":3372,"type":15},{"name":3501,"slug":3502,"type":15},"Dashboards","dashboards",{"name":3374,"slug":3375,"type":15},"2026-07-12T08:13:31.975246",{"slug":3506,"name":3506,"fn":3507,"description":3508,"org":3509,"tags":3510,"stars":22,"repoUrl":23,"updatedAt":3517},"dataproc-skills","manage Dataproc clusters and jobs","Skills to interact with your Dataproc clusters and jobs.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3511,3514],{"name":3512,"slug":3513,"type":15},"Data Engineering","data-engineering",{"name":3515,"slug":3516,"type":15},"Operations","operations","2026-07-12T08:13:42.179275",45,{"items":3520,"total":3570},[3521,3528,3536,3543,3550,3556,3563],{"slug":3325,"name":3325,"fn":3326,"description":3327,"org":3522,"tags":3523,"stars":22,"repoUrl":23,"updatedAt":3340},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3524,3525,3526,3527],{"name":3331,"slug":3332,"type":15},{"name":17,"slug":18,"type":15},{"name":3335,"slug":3336,"type":15},{"name":3338,"slug":3339,"type":15},{"slug":3342,"name":3342,"fn":3343,"description":3344,"org":3529,"tags":3530,"stars":22,"repoUrl":23,"updatedAt":3360},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3531,3532,3533,3534,3535],{"name":3348,"slug":3349,"type":15},{"name":17,"slug":18,"type":15},{"name":3352,"slug":3353,"type":15},{"name":3355,"slug":3356,"type":15},{"name":3358,"slug":3359,"type":15},{"slug":3362,"name":3362,"fn":3363,"description":3364,"org":3537,"tags":3538,"stars":22,"repoUrl":23,"updatedAt":3379},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3539,3540,3541,3542],{"name":3368,"slug":3369,"type":15},{"name":3371,"slug":3372,"type":15},{"name":3374,"slug":3375,"type":15},{"name":3377,"slug":3378,"type":15},{"slug":3381,"name":3381,"fn":3382,"description":3383,"org":3544,"tags":3545,"stars":22,"repoUrl":23,"updatedAt":3396},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3546,3547,3548,3549],{"name":3374,"slug":3375,"type":15},{"name":3388,"slug":3389,"type":15},{"name":3391,"slug":3392,"type":15},{"name":3394,"slug":3395,"type":15},{"slug":3398,"name":3398,"fn":3399,"description":3400,"org":3551,"tags":3552,"stars":22,"repoUrl":23,"updatedAt":3412},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3553,3554,3555],{"name":3404,"slug":3405,"type":15},{"name":3407,"slug":3408,"type":15},{"name":3410,"slug":3411,"type":15},{"slug":3414,"name":3414,"fn":3415,"description":3416,"org":3557,"tags":3558,"stars":22,"repoUrl":23,"updatedAt":3431},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3559,3560,3561,3562],{"name":3420,"slug":3421,"type":15},{"name":3423,"slug":3424,"type":15},{"name":3426,"slug":3427,"type":15},{"name":3429,"slug":3430,"type":15},{"slug":3372,"name":3372,"fn":3433,"description":3434,"org":3564,"tags":3565,"stars":22,"repoUrl":23,"updatedAt":3441},{"slug":8,"name":9,"logoUrl":10,"githubOrg":8},[3566,3567,3568,3569],{"name":3368,"slug":3369,"type":15},{"name":13,"slug":14,"type":15},{"name":3371,"slug":3372,"type":15},{"name":3352,"slug":3353,"type":15},43]