Accessing OpenAI models on Amazon Bedrock from Australia with global cross-Region inference
According to AWS Bedrock examples published 2026-08-31, calls to Bedrock Runtime in Asia Pacific (Sydney) ap-southeast-2 and Asia Pacific (Melbourne) ap-southeast-4 can be routed to OpenAI GPT-5.6 inference profiles. TL;DR: you can invoke GPT-5.6 Sol, Terra, and Luna from those source Regions without building destination-Region routing logic, but you must validate latency, quotas, and data residency for your account before production.
What’s possible in two lines: invoke the OpenAI-compatible APIs at the regional Bedrock Runtime endpoint (the /openai/v1 path) and let Bedrock route inference to supported commercial destination Regions. The tradeoffs are measurable, so test cross-region latency, check for cross-border data flow, and verify quota and cost differences in your account.
Immediate operational checklist (do this first)
- Run the AWS CLI checks below from ap-southeast-2 or ap-southeast-4 to confirm available inference profiles and their status.
- Check Service Quotas in the AWS console for RPM/TPM limits in your source Region and request increases early if you project high throughput.
- Run a low-volume, realistic test to measure p50/p95/p99 latency, TPM burn, and cache-hit rates; verify where logs and telemetry end up.
What AWS says (the concrete bits)
- Global GPT-5.6 inference profile IDs: global.openai.gpt-5.6-sol, global.openai.gpt-5.6-terra, global.openai.gpt-5.6-luna.
- Source Regions covered in the examples: ap-southeast-2 (Sydney) and ap-southeast-4 (Melbourne).
- Model capabilities (as reported): all three accept text and image inputs, generate text, and support context windows of up to 1, 000, 000 tokens (reported by AWS).
- Model positioning (reported wording):
“GPT-5.6 Sol is suited to demanding reasoning, coding, and agentic workloads.”, AWS (published 2026-08-31)
“Terra balances performance and cost for everyday production use.”, AWS (published 2026-08-31)
“Luna provides fast, affordable inference for high-volume and latency-sensitive applications.”, AWS (published 2026-08-31)
- Supported APIs on Bedrock Runtime: OpenAI Responses API, OpenAI Chat Completions API, and the Amazon Bedrock Converse API (available under the /openai/v1 path on the regional Bedrock Runtime endpoint).
- Authentication: AWS Signature Version 4 (SigV4) or a short-term Amazon Bedrock model inference API key (examples use the aws-bedrock-token-generator tool).
Quick discovery and invocation commands
From a shell in ap-southeast-2 you can list and inspect inference profiles:
aws bedrock list-inference-profiles --region ap-southeast-2 --type-equals SYSTEM_DEFINED --query "inferenceProfileSummaries[?contains(inferenceProfileId, 'openai.gpt-5.6')].[inferenceProfileId, status]" --output table
aws bedrock get-inference-profile --region ap-southeast-2 --inference-profile-identifier global.openai.gpt-5.6-terra
Bedrock Runtime base URL pattern used in examples:
https://bedrock-runtime.{region}.amazonaws.com/openai/v1
Example prompt used in the demonstrations:
“In three short bullet points, explain how Availability Zones help make an AWS application highly available.”
Auth, SDKs and prerequisites
- Python 3.9 or later.
- Python packages shown in examples: openai, boto3, and aws-bedrock-token-generator.
- Codex tooling: codex-cli version validated as 0.149.1. npm example: npm install -g @openai/codex@alpha. Treat alpha packages as potentially unstable for production.
- The aws-bedrock-token-generator referenced in examples is a GitHub tool used to create short-term Bedrock inference API keys from AWS credentials. Review its origin, security posture, and whether it’s acceptable for your environment before using it in production.
- Authentication options: use SigV4 from trusted IAM roles for servers, or short-lived inference API keys for client-side usage. Apply least-privilege IAM policies and rotate keys often.
Codex, the tooling (clarified)
“Codex” in these examples refers to a developer/agent tool and CLI that can target Bedrock Runtime as a model provider, not the historical OpenAI model name. It is demonstrated with a codex-cli client (0.149.1) and an npm package (alpha channel). Sample ~/.codex/config.toml entries in the examples include:
- model = “global.openai.gpt-5.6-sol”
- model_provider = “amazon-bedrock-runtime”
- model_reasoning_effort = “high”
- region = “ap-southeast-2”
For federated access, the examples point to an OIDC credential helper (aws-samples repo) to exchange IdP tokens for temporary AWS credentials; validate the helper before using it in production and prefer organizational SSO or IAM Identity Center integrations where possible.
Prompt caching, quotas and token accounting (consolidated)
Prompt caching can materially reduce cost and latency. Two modes are described:
- Implicit caching, enabled by default; no code change required. Bedrock may cache stable prefixes or identical requests under the hood.
- Explicit caching, you define prefix, cache boundary, and cache key to control what’s cached and for how long.
Quota metrics to watch are RPM (requests per minute) and TPM (tokens per minute). The examples report these token-accounting rules for GPT-5.6:
- Input tokens count 1:1 against TPM.
- Each output token consumes 10 tokens from the quota (i.e., output tokens are multiplied by 10 for TPM accounting in the provided examples).
That output multiplier increases TPM consumption compared with a 1:1 model. Before scaling, verify the multiplier and your actual RPM/TPM values in the Service Quotas console for your account and region. A simple planning formula from the examples:
TPM_required = total_input_tokens_per_minute + (10 × total_output_tokens_per_minute)
Use representative prompts and expected output lengths to simulate load and request quota increases early if required.
Monitoring and telemetry
Telemetry options in the examples include:
- Model invocation logging that records the model or inference profile ID and invocation metadata (use these logs to confirm which profile handled a request).
- Codex emitting OpenTelemetry (OTel) metrics over OTLP/HTTP; CloudWatch GenAI Observability -> Coding Agent Insights dashboards can visualize token usage, cache hit rate, latency and error rates.
- Example CloudWatch OTLP endpoint format shown: https://monitoring.ap-southeast-2.amazonaws.com/v1/metrics.
Operational recommendations: configure retention and access control for CloudWatch logs, avoid storing PII in raw prompt text, and implement client-side redaction or encryption for sensitive inputs before sending them across regions.
Sample invocation approach (minimal)
If you prefer short-term tokens over SigV4 for a quick test, generate a Bedrock model inference API key with aws-bedrock-token-generator, then call the regional Bedrock Runtime OpenAI-compatible path with an Authorization header. Example request sketch (replace values):
- Endpoint: https://bedrock-runtime.ap-southeast-2.amazonaws.com/openai/v1/responses
- Header: Authorization: Bearer <BEDROCK_INFERENCE_TOKEN>
- Body: standard Responses API payload (include the system/user messages or prompt).
Inspect CloudWatch invocation logs for the inference profile ID to trace which destination Region serviced the call.
Practical gotchas and open questions to verify
- Which exact destination AWS Regions Bedrock will route to for each global inference profile, the examples say “supported commercial AWS Regions” but do not enumerate them. Confirm with the Bedrock cross‑Region inference docs or AWS Support for your account.
- Latency expectations for cross-region inference from Sydney/Melbourne to destination Regions, measure p50/p95/p99 under realistic load.
- Current RPM and TPM quota values in ap-southeast-2 and ap-southeast-4; confirm the reported output token ×10 accounting is reflected in your Service Quotas console.
- Pricing for GPT-5.6 models via Bedrock, check the Bedrock pricing page at deployment time before finalizing cost models.
- Where invocation logs and telemetry are stored and what controls exist for redaction, retention, and access; design your logging and retention policies accordingly.
- Explicit cache key and TTL strategies, test cache-hit impact on cost and latency for your dominant workloads.
Contributor attributions
Examples and guidance in the referenced material are attributed to AWS specialists: Frank Huang, PhD; Sam Zhang; Melanie Li, PhD; Zohreh Norouzi; and Saurabh Trikande.
Three short next steps (for engineering and product leads)
- Run the CLI checks above from ap-southeast-2 or ap-southeast-4 to confirm the inference profiles and statuses in your account.
- Execute a staged test: low-volume requests using SigV4 or a short-term inference token, measure latency percentiles, token burn (TPM), cache-hit rate, and confirm logs contain the inference profile ID.
- If you expect production scale, request TPM/RPM increases now and open an AWS support case to clarify destination Regions, token accounting rules, and any compliance questions.
Key takeaways – common questions (and short answers)
- Can teams in Sydney and Melbourne call OpenAI GPT-5.6 models via Amazon Bedrock?
Yes, AWS examples published 2026-08-31 show ap-southeast-2 (Sydney) and ap-southeast-4 (Melbourne) can call Bedrock Runtime and use the global inference profiles global.openai.gpt-5.6-sol, -terra, and -luna.
- Which APIs and authentication methods work with Bedrock Runtime for these models?
OpenAI-compatible APIs (Responses and Chat Completions) are supported via the /openai/v1 path, and the Amazon Bedrock Converse API is available. Authentication options include SigV4 and short-term Bedrock model inference API keys (examples use aws-bedrock-token-generator).
- How should I plan for quotas and token consumption?
Monitor RPM and TPM in the Service Quotas console and test with realistic inputs/outputs. Examples report input tokens count 1:1 and each output token consumes 10 tokens for TPM accounting; verify these values in your account before scaling.
- Do these models accept images and very long context?
All three profiles are reported to accept text and image inputs and support up to a 1, 000, 000-token context window, verify the model spec directly in Bedrock documentation or your account’s model descriptions.
- What should I monitor when I deploy?
Track token consumption, cache hit rate, p95/p99 latency, error rate, and model selection. Use OpenTelemetry/OTLP for Codex and CloudWatch Coding Agent Insights dashboards for operational visibility.
Routing inference through Bedrock’s global profiles reduces client-side routing complexity and gives access to a larger capacity pool. That convenience doesn’t remove operational responsibilities: validate destination Regions, measure latency, confirm quota/token accounting in your account, secure short-lived credentials, and instrument telemetry before moving to production.