AWS elasticbeanstalk documentation change
Summary
Updated AI analysis requirements to differentiate between commercial regions (using Anthropic Claude) and GovCloud regions (using NVIDIA Nemotron). Added specific GovCloud model access instructions and clarified permission requirements.
Security assessment
Changes involve region-specific service dependencies and permissions clarifications. No security vulnerabilities are addressed, and no new security features are documented. Updates focus on operational requirements rather than security improvements.
Diff
diff --git a/elasticbeanstalk/latest/dg/health-ai-analysis.md b/elasticbeanstalk/latest/dg/health-ai-analysis.md index 5f9320a86..e74d3300c 100644 --- a//elasticbeanstalk/latest/dg/health-ai-analysis.md +++ b//elasticbeanstalk/latest/dg/health-ai-analysis.md @@ -29 +29 @@ Before you use AI analysis, verify that your environment meets the following req - * **Anthropic use case details** – AI analysis uses Anthropic Claude models through Amazon Bedrock. Anthropic requires you to submit a one-time use case details form before you can invoke their models. To submit this form, select any Anthropic model from the model catalog in the [Amazon Bedrock console](https://console.aws.amazon.com/bedrock/), or call the [`PutUseCaseForModelAccess`](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutUseCaseForModelAccess.html) API. You only need to do this once per AWS account. If you submit the form from the AWS Organizations management account, it automatically covers all member accounts in the organization. For more information, see [Access Amazon Bedrock foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-access.html). + * **Anthropic use case details (commercial regions)** – In commercial regions, AI analysis uses Anthropic Claude models through Amazon Bedrock. Anthropic requires you to submit a one-time use case details form before you can invoke their models. To submit this form, select any Anthropic model from the model catalog in the [Amazon Bedrock console](https://console.aws.amazon.com/bedrock/), or call the [`PutUseCaseForModelAccess`](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutUseCaseForModelAccess.html) API. You only need to do this once per AWS account. If you submit the form from the AWS Organizations management account, it automatically covers all member accounts in the organization. For more information, see [Access Amazon Bedrock foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-access.html). @@ -37 +37 @@ To resolve this, add `aws-marketplace:Subscribe`, `aws-marketplace:Unsubscribe`, - * **GovCloud regions** – If you are using AWS GovCloud (US) regions, you must enable access to the latest Anthropic Claude Sonnet and/or Opus model in Amazon Bedrock before using AI analysis. For instructions on enabling model access in GovCloud regions, see [Manage access to Amazon Bedrock foundation models](https://docs.aws.amazon.com/bedrock/latest/userguide/model-access.html#model-access-govcloud). For information about the latest available Anthropic Claude Sonnet and/or Opus model, see [Supported Regions and models for inference profiles](https://docs.aws.amazon.com/bedrock/latest/userguide/inference-profiles-support.html). + * **GovCloud regions** – If you are using AWS GovCloud (US) regions, AI analysis uses the NVIDIA Nemotron model instead of Anthropic Claude. You must request access to the NVIDIA Nemotron 3 Super 120B model in Amazon Bedrock before using AI analysis. To request access, open the [Amazon Bedrock Model access](https://console.amazonaws-us-gov.com/bedrock/home#/modelaccess) page in the GovCloud console and request access to NVIDIA Nemotron 3 Super 120B. The Anthropic use case details form and AWS Marketplace permissions are not required for GovCloud regions. For more information about enabling model access in GovCloud, see [Access Amazon Bedrock foundation models in AWS GovCloud (US)](https://docs.aws.amazon.com/bedrock/latest/userguide/model-access.html#model-access-govcloud). @@ -61 +61 @@ For more information about configuring instance profiles, see [Managing Elastic -If this is the first time an Anthropic Claude model is being invoked in your account, you also need AWS Marketplace permissions (`aws-marketplace:Subscribe`, `aws-marketplace:Unsubscribe`, and `aws-marketplace:ViewSubscriptions`). See Prerequisites for details. +In commercial regions, if this is the first time an Anthropic Claude model is being invoked in your account, you also need AWS Marketplace permissions (`aws-marketplace:Subscribe`, `aws-marketplace:Unsubscribe`, and `aws-marketplace:ViewSubscriptions`). These permissions are not required in GovCloud regions. See Prerequisites for details. @@ -128 +128 @@ The `--analyze` option requires EB CLI version 3.27 or later. - * **Service quotas** – AI analysis uses an Anthropic Claude model in Amazon Bedrock, which has default quotas for requests per minute and tokens per minute. If you encounter throttling errors, you can request a quota increase. For more information, see [Requesting a quota increase](https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html). + * **Service quotas** – AI analysis uses Amazon Bedrock foundation models, which have default quotas for requests per minute and tokens per minute. In commercial regions, Anthropic Claude models are used. In GovCloud regions, the NVIDIA Nemotron model is used. If you encounter throttling errors, you can request a quota increase. For more information, see [Requesting a quota increase](https://docs.aws.amazon.com/servicequotas/latest/userguide/request-quota-increase.html).