Describe the bug
The Bedrock provider currently requires bedrockAccessKeyId and bedrockSecretKey in the request payload and in the Agent block UI.
This prevents self-hosted deployments on AWS from using the normal AWS SDK default credential chain, such as:
- EC2 instance profiles
- ECS task roles
- EKS IRSA
Expected behavior
If explicit Bedrock credentials are provided, use them.
If they are not provided, and either AWS_REGION or AWS_PROFILE or any other AWS specific environment variables are set fall back to the AWS SDK default credential chain.