hermes - 💡(How to fix) Fix [BUG] Bedrock: Fix 'Invalid API Key format' for presigned URL tokens

Problem

AWS Bedrock integration failed with 'AccessDeniedException: Invalid API Key format: Must start with pre-defined prefix' when using presigned URL tokens.

RCA

The Bedrock adapter relied on the boto3 SDK, which expects standard IAM credentials or bearer tokens. When provided with a presigned URL, boto3 passed the entire URL as the API key string, which is unsupported by the Bedrock runtime API.

Solution

Implemented a direct HTTP transport in agent/bedrock_adapter.py using httpx.

• Added detection for presigned URLs in AWS_BEARER_TOKEN_BEDROCK.
• Bypasses boto3 when a presigned URL is detected.
• Manually constructs the endpoint URL: https://bedrock-runtime.{region}.amazonaws.com/?{query}.
• Uses raw POST requests to the Bedrock Converse API.

Verification

• Verified via test_bedrock_patch_v2.py.
• Confirmed HTTP 200 OK response from bedrock-runtime.ap-southeast-1.amazonaws.com.
• Verified successful normalization of response into OpenAI-compatible format.

Fix Verified & Closed.