Manage AI Integration Settings
- how-to
Use the Capella UI to manage settings for your integrations between an operational database, the Couchbase AI Data Plane, and Amazon Bedrock, OpenAI, or Amazon S3.
-
Use Amazon S3 to load data into the AI Data Plane.
-
Use OpenAI as a foundation model for your AI applications. Add Retrieval-Augmented Generation (RAG) to your applications through your operational database and get more accurate responses.
-
Use Amazon Bedrock as an embedding model provider for Vectorization Workflows.
Other integrations are available. Use the available filters or search for a supported AI Data Plane integration, to explore the full AI ecosystem available in the AI Data Plane.
You can directly manage your Amazon Bedrock API keys, OpenAI API keys, or Amazon S3 bucket credentials from the AI Data Plane > Integrations page. The Integrations page lets you see available integrations, and your current API keys or credentials. You can edit your API keys or credentials or delete them from your organization. Reuse your credentials across workflows to save time during workflow configuration.
You can add multiple OpenAI API keys or Amazon S3 bucket connections to the AI Data Plane at once. For more information about how to add a new OpenAI model or Amazon S3 bucket connection to the AI Data Plane, see Vectorize Structured Data from Amazon S3 or Process and Vectorize Unstructured Data.
Prerequisites
-
You have a short-term Amazon Bedrock API key, an OpenAI API key, or credentials for an Amazon S3 bucket.
-
You have logged in to the Capella UI.
Add an Amazon Bedrock API Key for Vectorization Workflows
Use a short-term Amazon Bedrock API key to connect Vectorization Workflows to an Amazon Bedrock embedding model in your AWS account.
When using Amazon Bedrock as an embedding model provider for Vectorization Workflows, you must use a short-term API key from AWS.
If your key does not start with bedrock-api-key-, it’s not a valid short-term key.
|
Set Up IAM Permissions
Before generating a Bedrock API key, make sure the IAM role you use to generate it has permission to invoke your embedding model.
As a minimum requirement, the role needs the bedrock:InvokeModel action scoped to the specific foundation model ARN.
For guidance on setting up IAM permissions for Amazon Bedrock, see Identity-based policy examples for Amazon Bedrock in the AWS documentation.
Generate a Short-Term Key
Short-term Bedrock API keys inherit the duration of the IAM session used to generate them, up to a maximum of 12 hours. To minimize Workflow interruptions, generate your key using the maximum 12-hour session duration. Keys that use shorter durations are also valid, but they have a greater risk of expiring in the middle of a Workflow run and causing interruptions.
For more information about how to generate a short-term Bedrock API key, see Amazon Bedrock API keys in the AWS documentation.
Add Your Key to the AI Data Plane
To add your Amazon Bedrock API key to the Couchbase AI Data Plane:
-
From your organization, go to .
-
Find Amazon Bedrock in the list of integrations and click Add Credentials.
-
Click Add Credentials.
-
Enter a name to identify your key in the AI Data Plane.
-
Select the AWS region where you generated your short-term key.
-
Enter your short-term Amazon Bedrock API key. The key must start with
bedrock-api-key-. -
Click Add Credentials.
Key Expiry and Renewal
Short-term Bedrock API keys expire when the IAM session expires, up to a maximum of 12 hours. When a key expires, Workflows using it stop generating embeddings and fail with error messages indicating an AWS authentication error.
An existing workflow that fails due to API key expiration cannot automatically use updated API keys. To resume vectorization, you must:
-
Delete the existing Workflow that failed due to API key expiration.
-
Create a new Workflow using the integration that contains the updated API key.
Edit an API Key or Credentials
To edit an API key or credentials in your organization:
-
From your organization, go to .
-
Search for what you want to edit:
-
Amazon Bedrock API keys
-
Amazon S3 credentials
-
OpenAI API keys
-
-
Click Manage Credentials.
-
Next to the API key or credentials you want to edit, under Actions, click Edit.
-
Update the API key or Amazon S3 credentials
-
Click Save API Key or Save Credentials.
Delete an API Key or Credentials
To delete an API key or credentials from your organization:
-
From your organization, go to .
-
Search for what you want to delete:
-
Amazon Bedrock API keys
-
Amazon S3 credentials
-
OpenAI API keys
-
-
Click Manage Credentials.
-
to the API key or credentials you want to delete, under Actions, click Delete.
-
To confirm the deletion, enter
delete. -
Click Delete API Key or Delete Credentials.