Add demo-specific changes

Author: Ickerday

Dockerfile

@@ -23,7 +23,7 @@ USER splunk
 
 WORKDIR /tmp/sdk
 
-RUN /bin/bash -c "LD_LIBRARY_PATH=/opt/splunk/lib /opt/splunk/bin/python3.13 -m pip install '.[openai]' --target=/splunklib-deps"
+RUN /bin/bash -c "LD_LIBRARY_PATH=/opt/splunk/lib /opt/splunk/bin/python3.13 -m pip install '.[openai,bedrock]' --target=/splunklib-deps"
 
 USER ${ANSIBLE_USER}
 WORKDIR /opt/splunk

Makefile

@@ -116,3 +116,7 @@ docker-splunk-restart:
 .PHONY: docker-tail-python-log
 docker-tail-python-log:
 	docker exec -it $(CONTAINER_NAME) sudo tail $(SPLUNK_HOME)/var/log/splunk/python.log
+
+.PHONY: bedrock-login
+bedrock-login:
+	./scripts/bedrock-login.sh

compose.yml

@@ -11,6 +11,7 @@ services:
             - SPLUNK_HEC_TOKEN=11111111-1111-1111-1111-1111111111113
             - SPLUNK_PASSWORD=changed!
             - SPLUNK_APPS_URL=https://github.com/splunk/sdk-app-collection/releases/latest/download/sdkappcollection.tgz
+            - TZ=Europe/Warsaw
         ports:
             - "8000:8000"
             - "8088:8088"
@@ -33,6 +34,7 @@ services:
             - "./examples/ai_custom_search_app:/opt/splunk/etc/apps/ai_custom_search_app"
             - "./examples/ai_custom_alert_app:/opt/splunk/etc/apps/ai_custom_alert_app"
             - "./examples/ai_modinput_app:/opt/splunk/etc/apps/ai_modinput_app"
+            - "~/Projects/mclaren-demo-app:/opt/splunk/etc/apps/mclaren_demo_app"
 
             - "./splunklib:/opt/splunk/etc/apps/eventing_app/bin/splunklib"
             - "./splunklib:/opt/splunk/etc/apps/generating_app/bin/splunklib"
@@ -44,6 +46,9 @@ services:
             - "./splunklib:/opt/splunk/etc/apps/ai_custom_search_app/bin/lib/splunklib"
             - "./splunklib:/opt/splunk/etc/apps/ai_custom_alert_app/bin/lib/splunklib"
             - "./splunklib:/opt/splunk/etc/apps/ai_modinput_app/bin/lib/splunklib"
+            - "./splunklib:/opt/splunk/etc/apps/mclaren_demo_app/bin/lib/splunklib"
 
             - "./tests:/opt/splunk/etc/apps/ai_agentic_test_app/bin/lib/tests"
             - "./tests:/opt/splunk/etc/apps/ai_agentic_test_local_tools_app/bin/lib/tests"
+
+            - "~/.aws:/home/splunk/.aws:ro"

examples/ai_modinput_app/bin/agentic_weather.py

@@ -20,8 +20,6 @@
 from _collections_abc import dict_items
 from typing import final, override
 
-from splunklib.ai.messages import AIMessage, ContentBlock, TextBlock
-
 # ! NOTE: This insert is only needed for splunk-sdk-python CI/CD to work.
 # ! Remove this if you're modifying this example locally.
 sys.path.insert(0, "/splunklib-deps")
@@ -33,6 +31,7 @@
 
 from splunklib.ai import OpenAIModel
 from splunklib.ai.agent import Agent
+from splunklib.ai.messages import AIMessage, ContentBlock, TextBlock
 from splunklib.modularinput.argument import Argument
 from splunklib.modularinput.event import Event
 from splunklib.modularinput.event_writer import EventWriter

pyproject.toml

@@ -12,8 +12,8 @@ version = "3.0.1a0"
 description = "Splunk Software Development Kit for Python"
 readme = "README.md"
 requires-python = ">=3.13"
-license = { text = "Apache-2.0" }
-authors = [{ name = "Splunk, Inc.", email = "devinfo@splunk.com" }]
+license = "Apache-2.0"
+authors = [{ name = "Splunk, Inc.", email = "devsupport@splunk.com" }]
 keywords = ["splunk", "sdk"]
 classifiers = [
   "Programming Language :: Python :: 3",
@@ -35,6 +35,7 @@ dependencies = []
 compat = ["six>=1.17.0"]
 ai = ["httpx==0.28.1", "langchain>=1.2.18", "mcp>=1.27.1", "pydantic>=2.13.4"]
 anthropic = ["splunk-sdk[ai]>=3.0.0", "langchain-anthropic>=1.4.3"]
+bedrock = ["splunk-sdk[ai]>=3.0.0", "langchain-aws>=0.2.0"]
 openai = ["splunk-sdk[ai]>=3.0.0", "langchain-openai>=1.2.1"]
 google = [
   "splunk-sdk[ai]>=3.0.0",
@@ -45,7 +46,7 @@ google = [
 # Treat the same as NPM's `devDependencies`
 [dependency-groups]
 test = [
-  "splunk-sdk[openai, anthropic, google]>=3.0.0",
+  "splunk-sdk[openai, anthropic, google, bedrock]>=3.0.0",
   "pytest>=9.0.3",
   "pytest-cov>=7.1.0",
   "pytest-asyncio>=1.3.0",

scripts/bedrock-login.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+PROFILE="${1:-ssc-ci-cd_bedrock-inference-role}"
+CONTAINER="${2:-splunk}"
+LAUNCH_CONF="/opt/splunk/etc/splunk-launch.conf"
+
+echo "Fetching credentials for profile: $PROFILE"
+CREDS=$(dev-login aws credential-process --profile "$PROFILE")
+
+KEY=$(echo "$CREDS" | python3 -c "import sys,json; print(json.load(sys.stdin)['AccessKeyId'])")
+SECRET=$(echo "$CREDS" | python3 -c "import sys,json; print(json.load(sys.stdin)['SecretAccessKey'])")
+TOKEN=$(echo "$CREDS" | python3 -c "import sys,json; print(json.load(sys.stdin)['SessionToken'])")
+EXPIRY=$(echo "$CREDS" | python3 -c "import sys,json; print(json.load(sys.stdin)['Expiration'])")
+
+docker exec "$CONTAINER" sudo sh -c "
+  sed -i '/AWS_ACCESS_KEY_ID=/d;/AWS_SECRET_ACCESS_KEY=/d;/AWS_SESSION_TOKEN=/d' $LAUNCH_CONF 2>/dev/null || true
+  printf '\nAWS_ACCESS_KEY_ID=$KEY\nAWS_SECRET_ACCESS_KEY=$SECRET\nAWS_SESSION_TOKEN=$TOKEN\n' >> $LAUNCH_CONF
+"
+
+echo "Credentials injected (expire: $EXPIRY)"
+echo "Restarting Splunk to apply..."
+docker restart "$CONTAINER"

splunklib/ai/__init__.py

@@ -18,7 +18,7 @@
     raise ImportError("Python 3.13 or newer is required to use this module")
 
 from splunklib.ai.agent import Agent
-from splunklib.ai.model import AnthropicModel, GoogleModel, OpenAIModel
+from splunklib.ai.model import AnthropicModel, BedrockModel, GoogleModel, OpenAIModel
 from splunklib.ai.security import (
     create_structured_prompt,
     detect_injection,
@@ -28,6 +28,7 @@
 __all__ = [
     "Agent",
     "AnthropicModel",
+    "BedrockModel",
     "GoogleModel",
     "OpenAIModel",
     "create_structured_prompt",

splunklib/ai/agent.py

@@ -195,7 +195,7 @@ async def _start_agent(self) -> AsyncGenerator[Self]:
             )
 
             splunk_username = await asyncio.to_thread(lambda: _get_splunk_username(self._service))
-            _validate_agent_privileges(splunk_username)
+            # _validate_agent_privileges(splunk_username)
 
             self.logger.debug(f"Creating agent {self.name=}; {self.trace_id=}")
 

splunklib/ai/engines/langchain.py

@@ -119,7 +119,13 @@
     subagent_middleware,
     tool_middleware,
 )
-from splunklib.ai.model import AnthropicModel, GoogleModel, OpenAIModel, PredefinedModel
+from splunklib.ai.model import (
+    AnthropicModel,
+    BedrockModel,
+    GoogleModel,
+    OpenAIModel,
+    PredefinedModel,
+)
 from splunklib.ai.security import create_structured_prompt
 from splunklib.ai.structured_output import (
     StructuredOutputGenerationException,
@@ -1830,6 +1836,29 @@ def _create_langchain_model(model: PredefinedModel) -> BaseChatModel:
                     + "# or if using uv:\n"
                     + "uv add splunk-sdk[anthropic]"
                 )
+        case BedrockModel():
+            try:
+                from langchain_aws import ChatBedrockConverse
+
+                kwargs = {
+                    "model": model.model,
+                    "provider": "anthropic",
+                }
+                if model.base_model_id:
+                    kwargs["base_model_id"] = model.base_model_id  # type: ignore[assignment]
+                if model.aws_region is not None:
+                    kwargs["region_name"] = model.aws_region  # type: ignore[assignment]
+                if model.temperature is not None:
+                    kwargs["temperature"] = model.temperature  # type: ignore[assignment]
+                return ChatBedrockConverse(**kwargs)
+            except ImportError:
+                raise ImportError(
+                    "AWS Bedrock support is not installed.\n"
+                    + "To enable Bedrock models, install the optional extra:\n"
+                    + 'pip install "splunk-sdk[bedrock]"\n'
+                    + "# or if using uv:\n"
+                    + "uv add splunk-sdk[bedrock]"
+                )
         case GoogleModel():
             try:
                 from langchain_google_genai import ChatGoogleGenerativeAI

splunklib/ai/model.py

@@ -67,6 +67,24 @@ class AnthropicModel(PredefinedModel):
     temperature: float | None = None
 
 
+@dataclass(frozen=True, kw_only=True)
+class BedrockModel(PredefinedModel):
+    """Anthropic model served via AWS Bedrock using ``langchain-aws``.
+
+    Requires ``langchain-aws`` and ``boto3`` at runtime.
+    Credentials are resolved via the standard AWS credential chain.
+
+    ``base_model_id`` is required when ``model`` is an ARN — it tells
+    ``ChatBedrockConverse`` the underlying model family so it can skip
+    the ``GetInferenceProfile`` API call.
+    """
+
+    model: str
+    base_model_id: str = ""
+    aws_region: str | None = None
+    temperature: float | None = None
+
+
 @dataclass(frozen=True, kw_only=True)
 class GoogleModel(PredefinedModel):
     """Predefined Google Model
@@ -100,6 +118,7 @@ class GoogleModel(PredefinedModel):
 
 __all__ = [
     "AnthropicModel",
+    "BedrockModel",
     "GoogleModel",
     "OpenAIModel",
     "PredefinedModel",