Model Access & Quotas
Complete these checks in the AWS account that will run Brainbase, in us-east-1. Access in another account, including your organization management account, is not sufficient evidence. This page describes release 2026-09-16.1; always inspect your applied account limits rather than assuming advertised defaults.
Model access is separate from throughput
The release's LLM gateway calls bedrock-mantle.us-east-1.api.aws using an ECS task role and SigV4. It does not require an Anthropic or OpenAI API key. The account must be allowed to use each selected model; a quota increase is not necessarily a model-access approval.
- Confirm your intended model is in the deployed Brainbase model selector and available to the deployment account through Bedrock Mantle in
us-east-1. - Have an authorized AWS administrator review applicable model terms, Marketplace model-subscription permissions, payment prerequisites, and organization restrictions. Brainbase subscription and third-party model access are separate.
- For a new account receiving "model not available for this account" or access-denied errors, contact AWS Support or your AWS account team. Ask whether frontier-model account enablement is required, not only whether a throughput quota is low. This can require an AWS-internal process; do not assume it appears as a trackable Service Quotas request.
- After installation, run an actual task with the selected model. A model catalog entry or successful test through a different Bedrock endpoint does not prove the appliance inference path works.
Established accounts may already have access; approval is not an extra step everyone must repeat. AWS documents model-access prerequisites. Its Anthropic first-time-use form requirement does not apply to the Mantle path; this does not waive other account eligibility, IAM, or model restrictions.
| Release model examples | Upstream identifier |
|---|---|
| Claude Sonnet 5 | anthropic.claude-sonnet-5 |
| Claude Opus 5 | anthropic.claude-opus-5 |
| GPT-5.6 Sol | openai.gpt-5.6-sol |
| GPT-5.6 Terra | openai.gpt-5.6-terra |
| GPT-5.6 Luna | openai.gpt-5.6-luna |
You do not need approval for every example model to begin. Request what you intend to use. The release also uses anthropic.claude-haiku-4-5 for title generation, so include that auxiliary model when validating the complete experience. The AWS appliance catalog can differ from the hosted SaaS catalog.
Check Bedrock Mantle throughput
In Service Quotas, select Amazon Bedrock and search for Bedrock Mantle. Its per-model input and output token quotas are separate from Bedrock Runtime quotas. Mantle does not expose an RPM quota. Some models have no published per-account quota there; absence is not proof of unlimited capacity or denied access.
For increases, use AWS Support's Amazon Bedrock limit-increase process and specify bedrock-mantle, us-east-1, exact model IDs, and requested input/output tokens per minute. Include expected concurrency, context/output sizes, and measured usage where available. If the quota is not exposed, ask AWS which capacity or enablement process applies. See AWS Mantle quotas.
There is no universal Brainbase TPM minimum: long prompts, tool results, parallel agents, and output reservations change demand. Start with one small task, then measure your representative workload before adding concurrency. A throughput allowance does not guarantee every on-demand request succeeds; transient capacity throttling can still occur. See AWS throughput guidance.
Size Lambda MicroVM capacity
The shipped sandbox image reserves 8192 MiB (8 GiB) per VM. In Service Quotas, select AWS Lambda and locate Max allocated MicroVM memory, quota code L-CD1C0CC4. Use the code to identify it if the display name differs. This is separate from ordinary Lambda function concurrency or per-function memory.
Count both RUNNING and SUSPENDED VMs, including other workloads in the account and region. Suspension reduces compute charges but does not release this capacity. See AWS MicroVM capacity.
| Example capacity plan | Baseline memory needed |
|---|---|
| One retained Brainbase VM, no spare capacity | 8 GiB |
| One retained VM plus capacity for one new VM | 16 GiB |
| Two retained VMs plus capacity for one new VM | 24 GiB |
| Ten retained VMs plus capacity for two new VMs | 96 GiB |
These are sizing examples, not AWS defaults or promised approvals. Add other MicroVM workloads and operating headroom. New accounts can have capacity for only one Brainbase VM. Check the applied account quota, request your needed value, and wait for the applied value to change before increasing usage.
Optional read-only checks with AWS CLI v2
Run in AWS CloudShell in the deployment account or an authenticated local AWS CLI session. Confirm the returned account ID first. These commands do not send email, invoke models, create VMs, or request increases.
aws sts get-caller-identity --region us-east-1
aws service-quotas get-service-quota \
--service-code lambda --quota-code L-CD1C0CC4 \
--region us-east-1 \
--query 'Quota.{Name:QuotaName,Applied:Value,Unit:Unit,Adjustable:Adjustable}'
aws lambda-microvms list-microvms --region us-east-1 \
--query 'items[].{Id:microvmId,State:state,Image:imageArn,Version:imageVersion}'
If your AWS CLI does not recognize lambda-microvms, update AWS CLI v2 or use the Lambda console. An unavailable CLI command is not evidence that the account lacks MicroVM access.
Check deployment infrastructure quotas
| Service | Capacity to check |
|---|---|
| ECS / Fargate | At least 7 available Fargate On-Demand vCPUs for the initial 15 services, plus rolling-deployment overlap and autoscaling headroom. Seven is the initial allocation, not a production quota recommendation. Include other workloads. |
| EC2 / EBS | Standard On-Demand vCPU capacity for one m7g.large (2 vCPUs), plus 200 GiB gp3 database storage and the instance root volume. |
| VPC / load balancing | Room for a new VPC, public/private subnets, NAT gateway and Elastic IP, ALB, security groups, and network interfaces. |
| Lambda / CodeBuild | Installation-helper concurrency, an in-account image-clone/build job, and MicroVM image/build capacity. MicroVM memory remains a separate quota. |
| SES | Production access, sending enabled, healthy account status, and daily/per-second limits sufficient for login traffic. See Login Email Setup. |
Review quotas in each service's console or Service Quotas; use the failed resource's error if CloudFormation identifies another account limit. Do not raise every quota blindly. Return to installation after the account and capacity checks.