​
Default model

The default is a conservative, broadly-available Bedrock model. Pass --model to use the current frontier Claude/Llama/Mistral IDs available in your AWS region.

​
Supported models

Any model available through Amazon Bedrock:
  • Anthropic Claude (Opus, Sonnet, Haiku across versions)
  • Meta Llama 4 family
  • Mistral Large
  • Amazon Titan
  • Cohere Command
  • Any other model ID the Bedrock Converse API accepts
Model IDs follow the format <provider>.<model-name>-<date>-v<version>:0, optionally with a regional inference prefix like us. or eu..

​
Installation

Bedrock support requires the AWS SDK (boto3), which is not installed by default:

​
Authentication

Standard AWS credential chain. Any of the following works:
Your IAM principal needs the bedrock:InvokeModel permission on the model ARN you want to test, plus access enabled for that model in the Bedrock console.

​
Example usage

​
Tool-use support

Yes via the Bedrock Converse API’s toolConfig parameter. Compatible with all 39 tool-use attacks in the framework, agent exploitation, MCP exploitation, multi-agent protocol attacks, and tool-injection vectors. Tool-use support depends on the underlying model (Claude, Llama 4, Mistral Large all support it; Amazon Titan does not). Filter the attack catalog with:

​
Notes

  • Uses the unified Bedrock Converse API, which normalizes message format across all model families
  • Region defaults to us-east-1; override via region constructor arg or AWS_REGION env var
  • Max output tokens per request: 4,096
  • Retry with exponential backoff is automatic on API failures (3 attempts)
  • Bedrock charges per token at AWS-published rates, separate from direct Anthropic/Meta pricing