AI Agent - Aug 13, 2026

Daybreak Access Enrollment for AWS Bedrock: Exact Gates

Quick Answer

Daybreak on Amazon Bedrock has multiple access gates. Complete them independently:

  1. obtain OpenAI Trusted Access for Cyber approval for the intended identity or service, organization or project, offering, model, and surface;
  2. obtain separate approval and provisioning if Daybreak Red is required;
  3. confirm the selected model is available to the AWS account in the intended Region;
  4. configure a Bedrock API key or AWS SDK credential chain for the Bedrock Mantle path;
  5. document authorization for the exact systems and actions in the security task.

Passing one gate does not pass the others.

Gate 1: OpenAI Trusted Access

Individuals can use OpenAI’s individual Trusted Access application. Organizations can submit the enterprise request and coordinate with their OpenAI representative.

Capture approval evidence for:

  • the approved person or service identity;
  • the ChatGPT workspace or API organization and project;
  • the Daybreak offering and model;
  • the allowed product surface;
  • any retention control separately approved for the exact API path.

Application submission or identity verification is not approval. Do not extend enterprise access to third-party customers, external services, downstream product features, or work outside the approved scope without confirmation.

Gate 2: Red Approval

Daybreak Blue approval does not grant Daybreak Red. Red is a separately approved specialist offering. If the project needs controlled exploit validation or red teaming, record the Red approval and provisioning evidence before attempting to select it.

Use the Blue vs Red guide to verify that the task actually needs Red.

Gate 3: AWS Model and Region

In the intended AWS account:

  1. inspect current Amazon Bedrock model access;
  2. confirm the exact selected model appears;
  3. check current Region compatibility;
  4. identify the quota and billing owner;
  5. test access with the intended IAM principal.

OpenAI’s local Bedrock documentation lists supported OpenAI model IDs for that client path, but availability varies by Region. Recheck the AWS model card and account at execution time rather than copying an old identifier.

Gate 4: Authentication

OpenAI documents two authentication paths for supported local ChatGPT Work and Codex surfaces, checked in this order:

  1. Bedrock API key, with AWS_BEARER_TOKEN_BEDROCK and an AWS Region;
  2. the AWS SDK credential chain, including shared profiles, SSO, console login, environment credentials, or a configured federated identity.

Desktop apps and IDE extensions may not inherit shell variables. OpenAI documents ~/.codex/.env as the local configuration path for required values on those surfaces. Never place live credentials in a repository, page, screenshot, or readiness record.

Gate 5: Task Authority

Approval to use a model is not authorization to assess a target. The engagement record must name:

  • systems, accounts, domains, repositories, and data in scope;
  • dates, operators, and escalation contacts;
  • allowed discovery, execution, and change actions;
  • forbidden actions and stop conditions;
  • evidence retention and disclosure rules;
  • rollback and incident response procedures.

Complete the Daybreak readiness check before a live pilot.

Troubleshooting Order

When access fails, check the exact model ID, Region support, credential validity, IAM permission, and whether an unintended or expired Bedrock token is taking precedence. For AWS credentials, quotas, billing, model access, or service failures, use the AWS administrator or AWS Support. For approval or OpenAI client configuration, use the appropriate OpenAI contact.

Frequently Asked Questions

Is submitting the Trusted Access application enough to use Daybreak?

No. OpenAI says submission or identity verification does not guarantee approval. Wait for approval and provisioning for the exact identity, organization or project, offering, model, and surface.

Do I need separate Daybreak Red approval?

Yes. Blue approval does not grant Red. The specialist Red offering requires separate approval and provisioning.

Does an AWS account automatically have Daybreak access?

No. OpenAI approval and AWS model entitlement are separate. The AWS account must also have the model in a supported Region and a permitted identity.

Which credentials does the Bedrock Mantle local provider use?

OpenAI documents a Bedrock API key first, then the AWS SDK credential chain. It does not use ChatGPT sign-in or an OpenAI API key for that provider path.

Does Trusted Access include Zero Data Retention?

Not automatically. OpenAI says to confirm any separately approved retention control for the exact API organization and applicable endpoint.

Official Sources

Next Decision