Claude on Bedrock — cross-region inference profile errors

import json
import boto3

client = boto3.client("bedrock-runtime", region_name="us-east-1")

# ✓ CORRECT — CRIS profile ID
MODEL_ID = "us.anthropic.claude-opus-4-7-20250514-v1:0"

# ✗ WRONG — base model ID for a 4.x+ model
# MODEL_ID = "anthropic.claude-opus-4-7-20250514-v1:0"

body = {
    "anthropic_version": "bedrock-2023-05-31",
    "max_tokens": 500,
    "messages": [{"role": "user", "content": "Hello from Bedrock"}],
}

response = client.invoke_model(modelId=MODEL_ID, body=json.dumps(body))
result = json.loads(response["body"].read())
print(result["content"][0]["text"])

# See which CRIS profiles are available in your account/region
aws bedrock list-inference-profiles \
  --region us-east-1 \
  --query "inferenceProfileSummaries[?contains(inferenceProfileName, 'claude')].{name:inferenceProfileName, id:inferenceProfileId, regions:models[*].modelArn}" \
  --output table

# Get details on one profile — including its underlying regions
aws bedrock get-inference-profile \
  --region us-east-1 \
  --inference-profile-identifier us.anthropic.claude-opus-4-7-20250514-v1:0

# 1) List regions in the CRIS profile
aws bedrock get-inference-profile \
  --region us-east-1 \
  --inference-profile-identifier us.anthropic.claude-opus-4-7-20250514-v1:0 \
  --query "models[*].modelArn" --output text
# arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-opus-4-7-...
# arn:aws:bedrock:us-east-2::foundation-model/anthropic.claude-opus-4-7-...
# arn:aws:bedrock:us-west-2::foundation-model/anthropic.claude-opus-4-7-...

# 2) For each region, verify model access status
for region in us-east-1 us-east-2 us-west-2; do
  echo "=== $region ==="
  aws bedrock list-foundation-models \
    --region $region \
    --query "modelSummaries[?modelId=='anthropic.claude-opus-4-7-20250514-v1:0'].{id:modelId, status:modelLifecycle.status}" \
    --output table
done

# 3) If model access is not granted, use the Bedrock console to request it
# Console -> Bedrock -> Model access -> Manage model access
# Or via CLI (if supported in your account tier):
aws bedrock put-model-invocation-logging-configuration ...

# Model access requests are typically approved within minutes for Anthropic models.

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "InvokeCrisProfile",
      "Effect": "Allow",
      "Action": ["bedrock:InvokeModel", "bedrock:InvokeModelWithResponseStream"],
      "Resource": [
        // The CRIS profile itself
        "arn:aws:bedrock:us-east-1:*:inference-profile/us.anthropic.claude-opus-4-7-20250514-v1:0",

        // The underlying foundation models in every region the profile hits
        "arn:aws:bedrock:us-east-1::foundation-model/anthropic.claude-opus-4-7-20250514-v1:0",
        "arn:aws:bedrock:us-east-2::foundation-model/anthropic.claude-opus-4-7-20250514-v1:0",
        "arn:aws:bedrock:us-west-2::foundation-model/anthropic.claude-opus-4-7-20250514-v1:0"
      ]
    },
    {
      "Sid": "GetInferenceProfile",
      "Effect": "Allow",
      "Action": ["bedrock:GetInferenceProfile", "bedrock:ListInferenceProfiles"],
      "Resource": "*"
    }
  ]
}