ChatGPT desktop app comes to Amazon Bedrock in AWS GovCloud (US)

This walkthrough arrives as organizations with strict security architectures look for ways to use OpenAI's frontier models without sending data outside their approved cloud boundary. By routing inference through Amazon Bedrock Mantle in us-gov-west-1, the ChatGPT desktop app and Codex can be governed with AWS Identity and Access Management (IAM) and existing AWS GovCloud (US) network controls.

The configuration relies on two files, requirements.toml and config.toml, which must be in place before the app first launches. An administrator-controlled requirements.toml sets limits users can't override, while config.toml names amazon-bedrock as the model provider and points to the approved endpoint. The guide also stresses that credentials and tokens should stay out of TOML files, and that rollback means returning devices to previously approved settings and revoking temporary AWS credentials.

AWS is explicit that following the guide does not itself authorize the workload. Each organization remains responsible for reviewing the selected model, Region, endpoint, workstation controls, repositories, credentials, and data flows against its system security plan. The result is a deployment an agency security team can test and document before approving broader use, rather than a turnkey clearance.