How hakimizz-tech/aws-bedrock-chatbot-agent works
This repository is Terraform infrastructure for deploying a self-hosted Bedrock chatbot, rather than the chatbot application code itself. The documented user workflow is browser access through the load balancer to Open WebUI, which uses the Bedrock Access Gateway for model access and MCPO for optional MCP tools. The graph also captures documented storage, networking, security, and deployment-state services. Application-service wiring and some resource details are based on the README; source excerpts were not available to verify further relationships.
Main entry points: ecs.tf Terraform stack · config.json MCPO tools · s3.tf Upload storage · vpc.tf VPC and subnets
Components 19
Chat services
- Open WebUI
ecs.tf - Bedrock Access Gateway
ecs.tf - MCPO tools
containers/mcpo/config.json
Network and ingress
- Application load balancer
ecs.tf - Cloud Map discovery
ecs.tf - VPC and subnets
vpc.tf - Interface endpoints
modules/vpc_endpoints_interface/main.tf - Security groups
modules/security_group/main.tf
Compute and storage
- Persistent user data
ecs.tf - Upload storage
s3.tf - Container registry
ecr.tf
Identity and secrets
- Task IAM roles
modules/iam_role/main.tf - Secrets Manager
secrets_manager.tf - ACM certificate
acm_certificate.tf
Terraform state
- Remote state bucket
terraform_state/main.tf
Other components
- Browser user
- Amazon Bedrock
- MCP servers
- Terraform stack
ecs.tf
Connections 25
- Browser user → Application load balancer: opens endpoint
- Application load balancer → Open WebUI: routes requests
- Open WebUI → Bedrock Access Gateway: sends model requests
- Bedrock Access Gateway → Amazon Bedrock: translates API calls
- Open WebUI → MCPO tools: uses tools
- MCPO tools → MCP servers: serves tools
- Open WebUI → Cloud Map discovery: discovers services
- Bedrock Access Gateway → Cloud Map discovery: discovered through
- MCPO tools → Cloud Map discovery: discovered through
- Terraform stack → VPC and subnets: provisions
- Terraform stack → Application load balancer: provisions
- Terraform stack → Open WebUI: deploys service
- Terraform stack → Bedrock Access Gateway: deploys service
- Terraform stack → MCPO tools: deploys service
- Terraform stack → Persistent user data: provisions
- Terraform stack → Upload storage: provisions
- Terraform stack → Container registry: provisions
- Terraform stack → Task IAM roles: provisions
- Terraform stack → Secrets Manager: provisions
- Terraform stack → ACM certificate: optionally provisions
- Terraform stack → Interface endpoints: optionally provisions
- Terraform stack → Security groups: provisions
- Open WebUI → Persistent user data: persists user data
- Open WebUI → Upload storage: stores uploads
- Terraform stack → Remote state bucket: sets up state