openai/openai-python · error · OpenAIError

Configure `provider` on `OpenAI`, not on `BedrockOpenAI.with

Error message

Configure `provider` on `OpenAI`, not on `BedrockOpenAI.with_options()`.

What it means

`BedrockOpenAI.with_options()` does not accept the `provider` argument; authentication providers are chosen implicitly by which credentials you pass. `provider` is an `OpenAI`-client concept (e.g. for Azure-style provider selection).

Source

Thrown at src/openai/lib/bedrock.py:571

        base_url: str | httpx2.URL | None | NotGiven = NOT_GIVEN,
        data_residency: DataResidency | None = None,
        timeout: float | Timeout | None | NotGiven = NOT_GIVEN,
        http_client: httpx2.Client | None = None,
        max_retries: int | NotGiven = NOT_GIVEN,
        default_headers: Mapping[str, str] | None = None,
        set_default_headers: Mapping[str, str] | None = None,
        default_query: Mapping[str, object] | None = None,
        set_default_query: Mapping[str, object] | None = None,
        _enforce_credentials: bool | None = None,
        _extra_kwargs: Mapping[str, Any] = {},
    ) -> Self:
        if data_residency is not None:
            raise OpenAIError("`data_residency` is only supported by OpenAI clients")
        base_url = None if isinstance(base_url, NotGiven) else base_url
        if callable(api_key):
            raise OpenAIError("Pass refreshable Bedrock credentials via `bedrock_token_provider`, not `api_key`.")
        if not isinstance(provider, NotGiven):
            raise OpenAIError("Configure `provider` on `OpenAI`, not on `BedrockOpenAI.with_options()`.")
        if admin_api_key is not None or workload_identity is not None:
            raise OpenAIError("BedrockOpenAI only supports Bedrock bearer token or AWS credential authentication.")
        if default_headers is not None and set_default_headers is not None:
            raise ValueError("The `default_headers` and `set_default_headers` arguments are mutually exclusive")
        if default_query is not None and set_default_query is not None:
            raise ValueError("The `default_query` and `set_default_query` arguments are mutually exclusive")

        headers = self._custom_headers
        if default_headers is not None:
            headers = {**headers, **default_headers}
        elif set_default_headers is not None:
            headers = set_default_headers
        params = self._custom_query
        if default_query is not None:
            params = {**params, **default_query}
        elif set_default_query is not None:
            params = set_default_query

View on GitHub (pinned to 9917c6e28e)

Solutions

1. Remove `provider` from Bedrock `with_options` calls; auth mode is derived from api_key/aws_* arguments
2. Set `provider` only on the `OpenAI` client

Example fix

# before
c = bedrock_client.with_options(provider='bedrock')
# after
c = bedrock_client.with_options(aws_profile='prod')

kwargs.pop('provider', None)  # before bedrock with_options

When it happens

Trigger: `bedrock_client.with_options(provider='bedrock')` on the sync client — any non-NotGiven value for `provider` in copy.

Common situations: Generic wrapper code that forwards `provider` to every client; configuration intended for `OpenAI` accidentally applied to the Bedrock client.

Related errors

• Configure `provider` on `AsyncOpenAI`, not on `AsyncBedrockO
• `data_residency` is only supported by OpenAI clients
• BedrockOpenAI only supports Bedrock bearer token or AWS cred
• AsyncBedrockOpenAI only supports Bedrock bearer token or AWS
• The `default_headers` and `set_default_headers` arguments ar

AI-assisted analysis of openai/openai-python@9917c6e28e (2026-08-28). Data as JSON: /api/errors/24e93a5f3b81879b. Report an issue: GitHub.