Skip to content

[Feat] Bedrock Batches - Add support for custom KMS encryption keys in Bedrock Batch operations - #16662

Merged
ishaan-jaff merged 5 commits into
mainfrom
litellm_bedrock_batches_s3_encrypt
Nov 15, 2025
Merged

ishaan-jaff merged 5 commits into
mainfrom
litellm_bedrock_batches_s3_encrypt

Conversation

@ishaan-jaff

@ishaan-jaff ishaan-jaff commented Nov 14, 2025 •

Copy link
Copy Markdown
Contributor

[Feat] Bedrock Batches - Add support for custom KMS encryption keys in Bedrock Batch operations

This PR adds support for specifying custom KMS encryption keys for S3 output data in Bedrock Batch inference jobs. This addresses the needs of enterprise customers who require custom encryption keys for their S3 buckets, as requested in #16645.

Fixes #16645

Example on litellm config.yaml

model_list:
  - model_name: "bedrock-batch-claude"
    litellm_params:
      model: bedrock/us.anthropic.claude-3-5-sonnet-20240620-v1:0
      s3_encryption_key_id: arn:aws:kms:us-west-2:123456789012:key/12345678-1234-1234-1234-123456789012
      # ... other params

Relevant issues

Pre-Submission checklist

Please complete all items before asking a LiteLLM maintainer to review your PR

  • I have Added testing in the tests/litellm/ directory, Adding at least 1 test is a hard requirement - see details
  • I have added a screenshot of my new test passing locally
  • My PR passes all unit tests on make test-unit
  • My PR's scope is as isolated as possible, it only solves 1 specific problem

Type

🆕 New Feature
✅ Test

Changes

@vercel

vercel Bot commented Nov 14, 2025

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Preview Comments Updated (UTC)
litellm Ready Ready Preview Comment Nov 14, 2025 10:06pm

@ishaan-jaff
ishaan-jaff merged commit 2bd6d0d into main Nov 15, 2025
22 of 53 checks passed
@ishaan-berri
ishaan-berri deleted the litellm_bedrock_batches_s3_encrypt branch March 26, 2026 21:51
fzowl pushed a commit to fzowl/litellm that referenced this pull request Jun 24, 2026
…n Bedrock Batch operations (BerriAI#16662)

* add s3_encryption_key_id

* add s3EncryptionKeyId to BedrockS3OutputDataConfig

* use s3EncryptionKeyId in bedrock output

* docs s3_encryption_key_id

* test_bedrock_batch_with_encryption_key_in_post_request

This branch was successfully deployed

1 active deployment
Preview — 13cde513 Deployed Nov 14, 2025 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature]: Bedrock Batch: allow to pass custom KMS encryption key id

1 participant