AWS has published instructions for deploying the ChatGPT desktop app and Codex with model inference routed through Amazon Bedrock Mantle in the AWS GovCloud (US) Region us-gov-west-1. The configuration is designed for organizations that require AWS GovCloud identities, endpoints, and regional controls.

The walkthrough uses API-mode sign-in, a named AWS profile, administrator-managed device policies, and network restrictions. Those restrictions allow connections to the approved Bedrock endpoint while disabling other external connections and network-enabled capabilities. The guide also describes two configuration files: requirements.toml, which establishes administrator-controlled limits, and config.toml, which specifies the Amazon Bedrock provider, approved model, AWS Region, and profile.

AWS says the ChatGPT desktop app can support Amazon Bedrock authentication through an API key or the AWS SDK credential chain, including AWS IAM Identity Center SSO within that chain. The guide recommends keeping credentials and other secrets out of the configuration files.

The deployment supports the ChatGPT desktop app, Codex CLI, and integrations with Visual Studio Code, JetBrains, and Xcode, according to the source. AWS also states that processing remains in the selected Amazon Bedrock Region for customers with data-residency requirements, and that zero data retention is supported in the described configuration.

The post cautions that using AWS GovCloud or following the guide does not itself authorize a workload. Organizations remain responsible for reviewing models, services, endpoints, workstation controls, repositories, credentials, and data flows through their own authorization processes.