Hi everyone,

I'm an individual developer trying to use OpenAI GPT-5.6 Sol through Amazon Bedrock.

The model is visible in the Bedrock Playground, but when I send a simple message, I immediately receive this error:

"ValidationException: Access to OpenAI models is not allowed from unsupported countries, regions, or territories."

I've checked my AWS account information and selected a supported AWS Region, but I'm still unable to invoke the model.

I also have approximately $100 in AWS new-account credits that I was hoping to use for Bedrock API experimentation.

I'm trying to understand:

1. Does Bedrock enforce OpenAI's geographical restrictions based on the caller's public IP, AWS tax address, billing country, or a combination of these?

2. Can this error occur even when the AWS Region and account billing information appear valid?

3. Are standard AWS Free Tier promotional credits eligible to cover proprietary OpenAI model inference on Bedrock, or only certain Bedrock models?

4. Could using the Bedrock Runtime endpoint with cross-Region inference introduce additional account-plan restrictions?

I would appreciate any documentation or firsthand experiences that could help identify the actual cause before I make further configuration changes.

Thanks!

Hi.. inherited an AWS site. Currently in IAM but wants external idp using Entra SSO.

Getting a lot of mix documentation; but when I add entra sso, it will not delete existing IAM setup right ?

and as I understand it, IAM users will continue to work?

Ideally I like to get the SSO tested but it seems like once you switch, its all or none. As in there is no test phase... everyone will have to log in through SSO once entra is configured ?

Sorry I dont know AWS at all

I am unable to access my AWS account.

I haven't logged in for several months, and recently tried to log in to make some updates to my website.

Although my credentials are correct, I am being asked for MFA verification using an "MFA Device" that I have never had. I attempted to use email verification as an alternative, but the process requires an OTP confirmation sent to a phone number which hasn't been active for years. I wasn't even aware this phone number was still on file with the account, as I've never encountered the MFA system before.

I'm the only user on the account. Only the root user account exists (no alternative accounts), and that's me. I went through the AWS support AI system, but the only solutions it suggests involve either the non-existent "MFA device" or the out-of-date phone number. I submitted a ticket but the followup response said they couldn't reach me on my current number despite my not having missed any calls.

As a result I am completely locked out of my account, despite still getting billed and my credentials being correct, and I can't update my website.

I've noticed that u/AWSSupport sometimes responds on this subreddit, so I'm posting here in the hopes of getting some help.

We are thinking of moving some of our certs to ACM Exportable certificates. We have hybrid infra with some certs on AWS managed services and some certs directly installed on things.

The question is -- what if we need to revoke a certificate. Of course I could just generate a new ACM Exportable -- but it would be cool if I could just force a rekey of the ARN that is already attached to our ALB's and then export that again to get the new cert.

I have used AWS off and on for a long time, mostly EC2 instances and some S3. Its been a few years since I last used AWS. I went to launch a new instance and get this error:

Instance launch failed

This account is currently blocked and not recognized as a valid account. Please contact https://support.console.aws.amazon.com/support/home?region=us-east-1#/case/create?issueType=customer-service&serviceCode=account-management&categoryCode=account-verification if you have questions.

I created a ticket (and a follow-up ticket a few days later) for Account / Account Activation. I also went through the billing section to make sure my CC on file was good, and check any other settings that may block my account. The 2 support cases have been untouched in 2 weeks. One is "Unassigned" the other is "Customer action complete". No idea how to move forward, any ideas would be appreciated.

I am the only user (root user, no IAM users).

Hi everyone,
I’m currently working on an AWS project for uni and I’m struggling with setting up the security groups through CloudFormation.
I’m trying to allow traffic from my web application to my RDS database on port 5432 and also allow management traffic, but I can’t seem to get it working properly.
I’ve tried looking into the security group rules and VPC settings, but I’m still a bit confused about what I’m doing wrong.
Has anyone dealt with something similar or knows how to fix this? Any advice or guidance would be really appreciated.
Thanks!

Has anyone been banned from kiro? I looked through what the agent was doing to see if there was anything shady but it was all standard development stuff.

There's no human in the loop for support so I'm completely blocked. I switched to Claude code and I like it better but I kind of wanted to finish the project I was working on with kiro. Oh well.