call-api-endpoint.ts

const crypto = require('crypto');
const rp = require('request-promise-native');
const SigV4Utils = {
  sign(key, msg) {
    return crypto.createHmac('sha256', key).update(msg).digest().toString('hex');
  },
  sha256(msg) {
    return crypto.createHash('sha256').update(msg, 'utf8').digest().toString('hex');
  },
  getSignatureKey(key, dateStamp, regionName, serviceName) {
    const kDate = crypto.createHmac('sha256', `AWS4${key}`).update(dateStamp).digest();
    const kRegion = crypto.createHmac('sha256', kDate).update(regionName).digest();
    const kService = crypto.createHmac('sha256', kRegion).update(serviceName).digest();
    const kSigning = crypto.createHmac('sha256', kService).update('aws4_request').digest();
    return kSigning;
  },
};
async function signAndRequest(method, uriRaw, config) {
  const service = 'bedrock';
  const region = process.env.AWS_REGION;
  const accessKey = process.env.AWS_ACCESS_KEY_ID;
  const secretKey = process.env.AWS_SECRET_ACCESS_KEY;
  const token = encodeURIComponent(process.env.AWS_SESSION_TOKEN);
  const algorithm = 'AWS4-HMAC-SHA256';
  const host = `https://prod.us-west-2.frontend.bedrock.aws.dev`;
  const canonicalUri = uriRaw;

  const now = new Date();
  const amzdate = `${now.toISOString().replace(/[-:]/g, '').split('.')[0]}Z`;
  const dateStamp = amzdate.split('T')[0];
  const credentialScope = `${dateStamp}/${region}/${service}/aws4_request`;
  let canonicalQuerystring = 'X-Amz-Algorithm=AWS4-HMAC-SHA256';
  canonicalQuerystring += `&X-Amz-Credential=${encodeURIComponent(`${accessKey}/${credentialScope}`)}`;
  canonicalQuerystring += `&X-Amz-Date=${amzdate}`;
  canonicalQuerystring += '&X-Amz-Expires=86400';
  canonicalQuerystring += `&X-Amz-Security-Token=${token}`;
  canonicalQuerystring += '&X-Amz-SignedHeaders=host';
  delete config.ServiceToken;

  const canonicalHeaders = `host:${host}\n`;
  const payloadHash = SigV4Utils.sha256(JSON.stringify(config));
  const canonicalRequest = `${method}\n${canonicalUri}\n${canonicalQuerystring}\n${canonicalHeaders}\nhost\n${payloadHash}`;

  const stringToSign = `${algorithm}\n${amzdate}\n${credentialScope}\n${SigV4Utils.sha256(canonicalRequest)}`;
  const signingKey = SigV4Utils.getSignatureKey(secretKey, dateStamp, region, service);
  const signature = SigV4Utils.sign(signingKey, stringToSign);

  canonicalQuerystring += `&X-Amz-Signature=${signature}`;
  const requestURL = `${host}${canonicalUri}?${canonicalQuerystring}`;
  const options = {
    method,
    uri: `https://${requestURL}`,
    body: config,
    json: true,
  };
  const urlReturn = await rp(options);
  console.log(urlReturn);

  return urlReturn;
}

const results = await signAndRequest('POST', '/InvokeModel', options); // Where options are your bedrock stuff :P