Multi-tenant API keys, rotation, rate limiting & Bedrock API keys

[JGoutin]

Implement a full multi-tenant access control layer.

Multi-tenant API keys (DynamoDB)

• Per-tenant API key issuance and validation stored in Amazon DynamoDB
• Scoped permissions per key (model allow/deny lists, endpoint restrictions)

API key rotation (Secrets Manager)

• Automated key rotation backed by AWS Secrets Manager

Rate limiting (DynamoDB)

• Per-key request and token rate limiting using Amazon DynamoDB atomic counters or DAX

AWS Bedrock API keys

• Allow tenants to supply their own AWS Bedrock credentials per key, routing their requests through their own Bedrock quota

REF:

• https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html
• https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html