When running claude-code-action on self-hosted actions runners that are in AWS, the canonical way to securely login to Bedrock would be through IRSA, but Bedrock support in the action requires AWS_BEARER_TOKEN_BEDROCK or long lived credentials instead.

Please consider adding direct IRSA support to simplify setup.