Configure the ChatGPT desktop app with Amazon Bedrock in AWS GovCloud (US)

Judgment

Security and platform leads must decide whether to route Codex model traffic through Amazon Bedrock Mantle in us-gov-west-1 under IAM and existing GovCloud network controls, accepting that inference stays bound to GovCloud identities, endpoints and Regional limits rather than a wider model footprint.

Basis

AWS authors Virgil Ennes and Sean Phuphanich (30 OCT 2026, Advanced 300) write that the ChatGPT desktop app is now available on Amazon Bedrock in AWS GovCloud (US), delivering OpenAI frontier models through two components: Work, which completes complex multi-step tasks and returns review-ready results, and Codex, a coding agent for developing, testing and reviewing software. The walkthrough targets organizations whose security architecture requires model inference to use AWS GovCloud (US) identities, endpoints and Regional controls. The mechanism is routing: Codex is configured to send model requests through Amazon Bedrock Mantle in us-gov-west-1, where access is governed by AWS Identity and Access Management and existing GovCloud network controls. Clients named are the ChatGPT desktop app, the Codex CLI, and IDE integrations with Visual Studio Code, JetBrains and Xcode. The tradeoff is architectural, not cosmetic — approval means inference is pinned to a GovCloud Region and its IAM and network perimeter, so the security team owns the blast radius of every endpoint, role and policy it grants.