# AWS credentials

You can use these credentials to authenticate the following nodes:

- [AWS Bedrock Chat Model](#)
- [AWS Certificate Manager](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awscertificatemanager)
- [AWS DynamoDB](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awsdynamodb)
- [AWS Elastic Load Balancing](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awselb)
- [AWS Lambda](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awslambda)
- [AWS Rekognition](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awsrekognition)
- [AWS S3](#)
- [AWS SES](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awsses)
- [AWS SNS](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awssns)
- [AWS SNS Trigger](#)
- [AWS SQS](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awssqs)
- [AWS Textract](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awstextract)
- [AWS Transcribe](/guides/automated-workflows/integrations/builtin/app-nodes/ts-wf-nodes-base.awstranscribe)
- [Embeddings AWS Bedrock](#)


## Prerequisites

Create an [AWS](https://aws.amazon.com/) account.

## Supported authentication methods

- API access key


## Using API access key

To configure this credential, you'll need:

- The AWS **Region**: be sure to adjust this if you aren't using the default region
- The **Access Key ID**: provided when you generate an access key
- The **Secret Access Key**: provided when you generate an access key


Refer to the [AWS Managing Access Keys documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) for instructions on generating and updating access keys.

## Using a temporary security credential

You can configure the access key as a temporary security credential by toggling the slider on.

If you select this option, you must add a **Session token** to the credential.

Refer to the [AWS Temporary security credential documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html) for more information on working with temporary security credentials.

## Virtual Private Cloud usage (custom endpoint)

If you use [Amazon Virtual Private Cloud (VPC)](https://aws.amazon.com/vpc/) to host Mosaic Workflows, you can establish a connection between your VPC and these apps:

- Rekognition
- Lambda
- SNS
- SES
- SQS
- S3


To use these apps with a custom endpoint, toggle the **Custom endpoint** slider on and add the relevant custom endpoint(s).

If you don't add a custom endpoint, the Mosaic Workflows credential will use the default endpoint.