[BUG] AWS Bedrock Air-Gapped Regions

Resolved 💬 4 comments Opened Dec 15, 2025 by cwatts-sage Closed Feb 14, 2026

Preflight Checklist

  • [x] I have searched existing issues and this hasn't been reported yet
  • [x] This is a single bug report (please file separate reports for different bugs)
  • [x] I am using the latest version of Claude Code

What's Wrong?

Add variable AWS_CA_BUNDLE to the configuration page to set custom ca chain for AWS regions outside of public use. This variable is a requirement in most of the applications and AWS CLI for the regions where AWS is not shipping the certificates in the default pem file. The application is not usable to users on airgapped AWS regions.

What Should Happen?

Add the AWS_CA_BUNDLE environment variable so when the AWS CLI/SDK is being used by Claude Code it can validate the CA Chain of AWS Bedrock within the airgapped AWS regions.

Error Messages/Logs

API Error: Conection Error

SSL cert chain is a known item in airgapped regions.

Steps to Reproduce

Cannot be reprodcued outside of region.

Claude Model

Sonnet (default)

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

vscode extension 2.0.62

Platform

AWS Bedrock

Operating System

Windows

Terminal/Shell

Windows Terminal

Additional Information

_No response_

View original on GitHub ↗

This issue has 4 comments on GitHub. Read the full discussion on GitHub ↗