> ## Documentation Index
> Fetch the complete documentation index at: https://docs.firebolt.io/llms.txt
> Use this file to discover all available pages before exploring further.

> Reference and syntax for creating Amazon Bedrock locations.

# CREATE LOCATION (Amazon Bedrock)

Creates a new location object in your Firebolt account for Amazon Bedrock. A Bedrock `LOCATION` securely stores AWS credentials that you can reuse when invoking Bedrock models with [`AWS_BEDROCK_AI_QUERY`](/reference-sql/functions-reference/ai/aws-bedrock-ai-query), [`AI_QUERY`](/reference-sql/functions-reference/ai/ai-query), or [`AI_EMBED_TEXT`](/reference-sql/functions-reference/ai/ai-embed-text).

## Syntax

```sql theme={"theme":{"light":"css-variables","dark":"css-variables"}}
CREATE LOCATION [ IF NOT EXISTS ] <location_name> WITH
  SOURCE = AMAZON_BEDROCK
  CREDENTIALS = {
    ( AWS_ACCESS_KEY_ID = '<aws_access_key_id>'
      AWS_SECRET_ACCESS_KEY = '<aws_secret_access_key>'
      [ AWS_SESSION_TOKEN = '<aws_session_token>' ] )
    |
    ( AWS_ROLE_ARN = '<aws_role_arn>'
      [ AWS_ROLE_EXTERNAL_ID = '<aws_role_external_id>' ] )
  }
  [ DESCRIPTION = '<description>' ]
```

## Parameters

### Common parameters

| Parameter         | Description                                                     |
| :---------------- | :-------------------------------------------------------------- |
| `<location_name>` | A unique identifier for the location within your account.       |
| `SOURCE`          | The external source type. For Bedrock, set to `AMAZON_BEDROCK`. |
| `DESCRIPTION`     | Optional comment describing the location's purpose.             |

### Amazon Bedrock parameters

| Parameter     | Description                                                       |
| :------------ | :---------------------------------------------------------------- |
| `CREDENTIALS` | AWS authentication credentials used when invoking Bedrock models. |

#### AWS authentication parameters

| Parameter               | Description                                                      |
| :---------------------- | :--------------------------------------------------------------- |
| `AWS_ACCESS_KEY_ID`     | Your AWS access key ID for key-based authentication.             |
| `AWS_SECRET_ACCESS_KEY` | Your AWS secret access key for key-based authentication.         |
| `AWS_SESSION_TOKEN`     | Optional temporary session token for temporary credentials.      |
| `AWS_ROLE_ARN`          | The ARN of the IAM role to assume for role-based authentication. |
| `AWS_ROLE_EXTERNAL_ID`  | Optional external ID for role assumption.                        |

## Examples

### Authenticate using an access key

```sql theme={"theme":{"light":"css-variables","dark":"css-variables"}}
CREATE LOCATION my_bedrock_location WITH
  SOURCE = AMAZON_BEDROCK
  CREDENTIALS = (
    AWS_ACCESS_KEY_ID = '<aws_access_key_id>'
    AWS_SECRET_ACCESS_KEY = '<aws_secret_access_key>'
  );
```

### Authenticate using a role

The following example uses a role and includes a recommended external ID:

```sql theme={"theme":{"light":"css-variables","dark":"css-variables"}}
CREATE LOCATION my_bedrock_location WITH
  SOURCE = AMAZON_BEDROCK
  CREDENTIALS = (
    AWS_ROLE_ARN = 'arn:aws:iam::123456789012:role/BedrockAccess'
    AWS_ROLE_EXTERNAL_ID = 'my-external-id'
  );
```

<Note>
  For role-based AWS access you can additionally set an external ID. An external ID is a value you choose and control that AWS checks when Firebolt assumes your role, adding a second condition on top of your account's unique IAM principal. Configuring one is a recommended best practice. See [IAM roles](/security#iam-roles).
</Note>

`AWS_ROLE_EXTERNAL_ID` is optional. To assume the role without an external ID, omit it:

```sql theme={"theme":{"light":"css-variables","dark":"css-variables"}}
CREATE LOCATION my_bedrock_location WITH
  SOURCE = AMAZON_BEDROCK
  CREDENTIALS = (
    AWS_ROLE_ARN = 'arn:aws:iam::123456789012:role/BedrockAccess'
  );
```

### Create a Bedrock location with a description

```sql theme={"theme":{"light":"css-variables","dark":"css-variables"}}
CREATE LOCATION my_bedrock_location WITH
  SOURCE = AMAZON_BEDROCK
  CREDENTIALS = (
    AWS_ACCESS_KEY_ID = '<aws_access_key_id>'
    AWS_SECRET_ACCESS_KEY = '<aws_secret_access_key>'
  )
  DESCRIPTION = 'Credentials for invoking Bedrock models';
```

<Note>
  To use this location, pass its name as the `<location>` argument to [`AWS_BEDROCK_AI_QUERY`](/reference-sql/functions-reference/ai/aws-bedrock-ai-query), [`AI_QUERY`](/reference-sql/functions-reference/ai/ai-query), or [`AI_EMBED_TEXT`](/reference-sql/functions-reference/ai/ai-embed-text).
</Note>