diff --git a/src/agents/pi-embedded-helpers/errors.ts b/src/agents/pi-embedded-helpers/errors.ts
index 849c4293e..5e478051c 100644
--- a/src/agents/pi-embedded-helpers/errors.ts
+++ b/src/agents/pi-embedded-helpers/errors.ts
@@ -388,6 +388,10 @@ const ERROR_PATTERNS = {
     /\b403\b/,
     "no credentials found",
     "no api key found",
+    // AWS SSO / aws-sdk auth resolution errors (e.g. Bedrock)
+    "sso session token",
+    "error loading sso token",
+    "was not found or is invalid",
   ],
   format: [
     "string should match pattern",