Configuring ChatGPT Desktop App with Amazon Bedrock in AWS GovCloud

AWS detailed a procedure for connecting the ChatGPT desktop app and Codex coding agent to Amazon Bedrock inside the AWS GovCloud (US-West) Region. Intended for organizations with strict security and data residency constraints, the configuration routes model inference via the Bedrock Responses API endpoint rather than public OpenAI endpoints. Security is managed through local TOML policy files—requirements.toml and config.toml—which enforce API-only login, disable public web search and external plugin features, and block traffic to non-approved domains. Authentication relies on either Bedrock API keys or standard AWS SDK credential chains, including AWS IAM Identity Center SSO. AWS noted that following the guide does not automatically authorize a workload, leaving compliance review to individual organizations.

Key takeaways

• The ChatGPT desktop app and Codex agent can route inference to Amazon Bedrock Mantle in the us-gov-west-1 Region using AWS IAM identities.
• Data residency stays within the chosen AWS Region, supporting zero data retention where prompts and completions are not stored durably or shared with model providers.
• Local administration uses requirements.toml and config.toml to restrict network domains, blocking OpenAI public endpoints and disabling external browser and plugin features.
• Authentication supports an Amazon Bedrock API key or the standard AWS SDK credential chain, including AWS IAM Identity Center SSO.