Amazon Bedrock (Runtime API) error
Amazon Bedrock 403 InvalidClientTokenId: what it means and how to fix it
403 InvalidClientTokenIdRetry? Not statedLast verified 1 documented fix1 source
What it means
The X.509 certificate or AWS access key ID provided does not exist in AWS records.
Causes
- Wrong AWS access key ID
- Using old credentials after creating new access keys
How to fix it
- Fix 1.
Verify that you are using the correct AWS access key ID, and the new credentials if you recently created new access keys.
More Amazon Bedrock errors
All 22 Amazon Bedrock errorsHTTP 403 at other providers
Compare 403 across providers403 permission_errorRetry? Not statedAnthropic API403 Forbidden (network access denied)Retry? Not statedAzure OpenAI403 Forbidden (resource has been temporarily blocked)Retry? Not statedAzure OpenAI403 permission_deniedRetry? NoGemini API403 PERMISSION_DENIEDRetry? NoGemini API403 ForbiddenRetry? Not statedGroq API403 ForbiddenRetry? Not statedMistral API403 Country, region, or territory not supportedRetry? Not statedOpenAI API403 PermissionDeniedErrorRetry? Not statedOpenAI API403 permission_deniedRetry? Not statedOpenRouter403 Budget limit exceededRetry? NoOpenRouter403 content_policy_violationRetry? Not statedOpenRouter
FAQ
What does the Amazon Bedrock error "403 InvalidClientTokenId" mean?
The X.509 certificate or AWS access key ID provided does not exist in AWS records.
How do I fix Amazon Bedrock "403 InvalidClientTokenId"?
Verify that you are using the correct AWS access key ID, and the new credentials if you recently created new access keys.
Should I retry Amazon Bedrock "403 InvalidClientTokenId"?
Not stated. The official docs do not say whether this error is retryable.
Which other AI APIs return HTTP 403?
Per their official error docs: Anthropic API (403 permission_error), Azure OpenAI (403 Forbidden (network access denied); 403 Forbidden (resource has been temporarily blocked)), Gemini API (403 permission_denied; 403 PERMISSION_DENIED), Groq API (403 Forbidden), Mistral API (403 Forbidden), OpenAI API (403 Country, region, or territory not supported; 403 PermissionDeniedError), OpenRouter (403 permission_denied; 403 Budget limit exceeded; 403 content_policy_violation; 403 refusal), Vertex AI (403 PERMISSION_DENIED), xAI API (403 Forbidden).
Sources
Last verified against 1 source: Amazon Bedrock's official docs and official SDK repositories.
Newsletter
Know when the APIs change
One email per week. New model releases, API changes, what broke, and how developers are working around it.