Skip to content

Conversation

@busla
Copy link
Contributor

@busla busla commented Nov 19, 2025

Summary

This PR upgrades boto3 and aioboto3 dependencies to support Amazon Bedrock AgentCore Control API, and includes authentication improvements for AgentCore JWT token handling.

Changes

🔧 Dependency Upgrades

  • boto3: 1.36.0 → 1.40.76 (pyproject.toml) / 1.40.53 (requirements.txt)
    • Adds support for bedrock-agentcore-control API
    • Ensures compatibility with aioboto3 for async Bedrock calls
  • aioboto3: 13.4.0 → 15.5.0
    • Updated to match boto3 version for async SageMaker/Bedrock calls

🔐 AgentCore Authentication Improvements

File: litellm/llms/bedrock/chat/agentcore/transformation.py

Fixed JWT token authentication priority in AgentCore sign_request:

  • Before: Only checked optional_params.get('api_key')
  • After: Prioritizes api_key parameter first, then falls back to optional_params
  • Added debug logging to trace authentication flow (JWT Bearer vs AWS SigV4)

This fixes cases where the api_key parameter was passed but being ignored.

🐳 Docker Build Enhancement

File: docker/Dockerfile.dev

Updated Docker build to explicitly install wheel with [proxy] extras:

# Before
RUN pip install dist/*.whl

# After
RUN pip install $(ls dist/*.whl)[proxy]

Ensures boto3 1.40.73+ is included in the Docker image for AgentCore support.

📦 Dependency Adjustments

  • semantic-router: Removed version upper bound (now * instead of >=0.1.12)
  • litellm-proxy-extras: Updated version constraint
  • litellm-enterprise: Updated version constraint

🛠️ Development Tools

  • Added .gitignore patterns for Claude Code/Claude Flow artifacts
  • Added taplo.toml for TOML formatting configuration (maintains 4-space indentation)

Testing

  • ✅ Existing test suite passes with upgraded boto3
  • ✅ AgentCore JWT authentication now correctly prioritizes api_key parameter
  • ✅ Docker build includes proxy extras with boto3 1.40.73+

Breaking Changes

None - backward compatible upgrade.

Motivation

Support for Amazon Bedrock AgentCore Control API requires boto3 >= 1.40.0, and the authentication fix ensures proper JWT token handling for Cognito-authenticated AgentCore endpoints.

@vercel
Copy link

vercel bot commented Nov 19, 2025

@busla is attempting to deploy a commit to the CLERKIEAI Team on Vercel.

A member of the Team first needs to authorize it.

@busla busla marked this pull request as draft November 19, 2025 10:51
@busla busla marked this pull request as ready for review November 19, 2025 12:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant