claude-platform-on-aws changedbuild-with-claude/claude-platform-on-aws
Nearest release: v2.1.309, published 3 hours before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+31added
Lines−28removed
From line
26
where the diff opens
First seen
14 Aug 2026
this site's first read of the page
Recorded edits51to this page, all time
The whole hunk
from line 26, old and new numbered
/
from line 26
2626| ---------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ |
2727| **Who operates the stack** | Anthropic | AWS | AWS |
2828| **API surface** | Claude API (`/v1/{endpoint}`) | Messages API at `/anthropic/v1/messages` | Bedrock Converse / InvokeModel |
29| **Feature availability** | Typically same-day as Claude API (see [feature limitations](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#features-not-supported)) | Per Amazon Bedrock release schedule | Per Amazon Bedrock release schedule |
29| **Feature availability** | Typically same-day as Claude API (see [feature limitations](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#features-not-supported)) | Follows the Amazon Bedrock release schedule | Follows the Amazon Bedrock release schedule |
3030| **Agent Skills** | Available | Not available (requires code execution) | Not available |
3131| **Beta features** | Pass through with `anthropic-beta` headers (see [feature limitations](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#features-not-supported)) | The beta features Amazon Bedrock supports, through the `anthropic-beta` header | The beta features Amazon Bedrock supports, through the `anthropic_beta` field of the InvokeModel request body |
3232| **Authentication** | AWS IAM / SigV4 or API key | AWS IAM / SigV4 | AWS IAM / SigV4 or bearer token |
from line 117
117117Once the new organization is running, the differences are concentrated in billing and authentication, which are handled through AWS:
118118
119119* **Billing** moves to AWS Marketplace: usage is billed in Claude Consumption Units rather than prepaid credits (see [Billing](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#billing)), and you set spend limits on the **Billing** page (see [Spend limits](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#spend-limits)). During the transition, billing stays separate: the existing organization continues to be billed as it is today.
120* **Authentication and access** move to AWS: requests authenticate with AWS credentials or with API keys generated in the AWS Console, not the Claude Console (see [Authentication](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#authentication)). Organization membership is managed through AWS IAM rather than the Claude Console (see [Available pages](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#available-pages)), and the SDK provides a platform-specific client class (see [Install an SDK](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#install-an-sdk)).
120* **Authentication and access** move to AWS: requests authenticate with AWS credentials or with API keys generated in the AWS Console, not the Claude Console (see [Authentication](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#authentication)). Organization membership is managed through AWS IAM rather than the Claude Console (see [Available pages](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#available-pages)), and the Claude SDK provides a platform-specific client class (see [Install an SDK](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#install-an-sdk)).
121121* **Day-to-day API usage** works the way it does on the first-party Claude API, except where noted in the [feature limitations](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#features-not-supported). Before shifting production traffic, check your rate limits: new organizations are placed on the Start tier, and limit increases go through your Anthropic account representative (see [Rate limits and quotas](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#rate-limits-and-quotas)).
122122
123123For Claude Enterprise (claude.ai) organizations, which behave differently, see the [offering comparison](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#claude-platform-on-aws-vs-amazon-bedrock).
from line 239
239239 import com.anthropic.client.okhttp.AnthropicOkHttpClient;
240240
241241 void main() {
242 String token = TokenGenerator.builder().region(Region.US_WEST_2).build().getToken();
242 String token = TokenGenerator.builder()
243 .region(Region.US_WEST_2)
244 .build()
245 .getToken();
243246
244247 AnthropicClient client = AnthropicOkHttpClient.builder()
245248 .backend(AwsBackend.builder()
from line 392
389392 # Omit the x-amz-security-token header if you use long-term IAM user credentials
390393 curl "https://aws-external-anthropic.us-west-2.api.aws/v1/messages" \
391394 --aws-sigv4 "aws:amz:us-west-2:aws-external-anthropic" \
392 --user "$AWS_ACCESS_KEY_ID:$AWS_SECRET_ACCESS_KEY" \
395 -u "$AWS_ACCESS_KEY_ID:$AWS_SECRET_ACCESS_KEY" \
393396 -H "x-amz-security-token: $AWS_SESSION_TOKEN" \
394397 -H "content-type: application/json" \
395398 -H "anthropic-version: 2023-06-01" \
from line 615
612615 # Omit the x-amz-security-token header if you use long-term IAM user credentials
613616 curl "https://aws-external-anthropic.us-west-2.api.aws/v1/messages" \
614617 --aws-sigv4 "aws:amz:us-west-2:aws-external-anthropic" \
615 --user "$AWS_ACCESS_KEY_ID:$AWS_SECRET_ACCESS_KEY" \
618 -u "$AWS_ACCESS_KEY_ID:$AWS_SECRET_ACCESS_KEY" \
616619 -H "x-amz-security-token: $AWS_SESSION_TOKEN" \
617620 -H "content-type: application/json" \
618621 -H "anthropic-version: 2023-06-01" \
from line 808
8058083. Click **Open Claude Console**. The AWS Console issues a JWT and redirects you to `platform.claude.com`.
8068094. On first sign-in, you're prompted for an email address. Enter your work email. The platform provisions your Claude Console user just-in-time.
807810
808Two Claude Console roles are available: **Admin** and **Developer**. The Admin role grants access to all Claude Console pages and settings available for Claude Platform on AWS. The Developer role grants read access to usage, cost, request log, rate limit, and workspace information. Contact your Anthropic account representative to assign the Admin or Developer role to a principal.
811Two Claude Console roles are available: **Admin** and **Developer**. The Admin role grants access to all Claude Console pages and settings available for Claude Platform on AWS. The Developer role grants read access to usage, cost, rate limit, and workspace information. Contact your Anthropic account representative to assign the Admin or Developer role to a principal.
809812
810813### Available pages
811814
812815The **Through AWS gateway** column indicates whether the page reads and writes data through the AWS gateway (and is therefore governed by [IAM actions for Claude Platform on AWS](https://platform.claude.com/docs/en/api/claude-platform-on-aws-iam-actions)). Pages marked **No** read organization-level metadata directly from Anthropic and bypass IAM action checks.
813816
814| Page | Available | Through AWS gateway | Notes |
815| --------------------- | ------------- | ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
816| **Usage** | Yes | No | View token usage by model, workspace, and dimension. Data can take a few minutes to appear after a request. |
817| **Cost** | Yes | No | View cost breakdowns by model and workspace. AWS Cost Explorer shows the aggregated [Claude Consumption Unit (CCU)](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#billing) line item. |
818| **Rate limits** | Yes | No | View rate limits (read-only). Tier increases go through your Anthropic account representative; see [Rate limits and quotas](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#rate-limits-and-quotas). |
819| **Logs** | Yes | No | View per-request metadata such as time, model, workspace, token counts, and status. Log entries do not include prompts or responses. |
820| **Workspaces** | Yes | Yes (except spend limits) | View per-region workspaces. With the Admin role, you can also create, rename, and archive workspaces, and set per-workspace [spend limits](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#spend-limits). |
821| **Encryption keys** | Yes | Yes | A section of the [Data retention](https://platform.claude.com/settings/privacy#encryption-keys) page (`platform.claude.com/settings/privacy`) in the Claude Console, shown while **Organization** is selected in the dropdown menu at the top of the page. Register AWS KMS keys there (Admin role), as described in [Set up CMEK on Claude Platform on AWS](https://platform.claude.com/docs/en/manage-claude/cmek-claude-platform-on-aws). To attach a registered key to a workspace, select the workspace from that dropdown menu, then select the key under **Encryption key**. |
822| **Files** | Yes | Yes | View and manage uploaded files. |
823| **Skills** | Yes | Yes | View and manage Agent Skills. |
824| **Batches** | Yes | Yes | View and manage batch processing jobs. |
825| **Agents** | Yes | Yes | View and manage agent definitions. |
826| **Sessions** | Yes | Yes | View agent sessions and event history. |
827| **Environments** | Yes | Yes | View and manage cloud sandbox configurations for sessions. |
828| **Credential vaults** | Yes | Yes | View and manage credential vaults for session authentication. |
829| **Memory stores** | Yes | Yes | View and manage persistent agent memory. |
830| **Webhooks** | Yes | Yes | View and manage webhook endpoints. |
831| **API keys** | No | N/A | Manage API keys in the AWS Console (**Claude Platform on AWS → API keys**). See [API key authentication](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#api-key-authentication). |
832| **Members** | No | N/A | Not applicable. AWS IAM manages access. |
833| **Billing** | Yes (limited) | No | Set an organization monthly spend limit; see [Spend limits](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#spend-limits). AWS Marketplace manages invoicing. View cost breakdowns on the **Cost** page. |
834| **Claude Code** | No | N/A | View Claude Code usage on the **Usage** page. |
817| Page | Available | Through AWS gateway | Notes |
818| --------------------- | ---------------- | ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
819| **Usage** | Yes | No | View token usage by model, workspace, and dimension. Data can take a few minutes to appear after a request. |
820| **Cost** | Yes | No | View cost breakdowns by model and workspace. AWS Cost Explorer shows the aggregated [Claude Consumption Unit (CCU)](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#billing) line item. |
821| **Rate limits** | Yes | No | View rate limits (read-only). Tier increases go through your Anthropic account representative; see [Rate limits and quotas](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#rate-limits-and-quotas). |
822| **Logs** | Yes (Admin role) | No | View per-request metadata such as time, model, workspace, token counts, and status. Log entries do not include prompts or responses. |
823| **Workspaces** | Yes | Yes (except spend limits) | View per-region workspaces. With the Admin role, you can also create, rename, and archive workspaces, and set per-workspace [spend limits](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#spend-limits). |
824| **Encryption keys** | Yes | Yes | A section of the [Data retention](https://platform.claude.com/settings/privacy#encryption-keys) page (`platform.claude.com/settings/privacy`) in the Claude Console, shown while **Organization** is selected in the dropdown menu at the top of the page. Register AWS KMS keys there (Admin role), as described in [Set up CMEK on Claude Platform on AWS](https://platform.claude.com/docs/en/manage-claude/cmek-claude-platform-on-aws). To attach a registered key to a workspace, select the workspace from that dropdown menu, then select the key under **Encryption key**. |
825| **Files** | Yes | Yes | View and manage uploaded files. |
826| **Skills** | Yes | Yes | View and manage Agent Skills. |
827| **Batches** | Yes | Yes | View and manage batch processing jobs. |
828| **Agents** | Yes | Yes | View and manage agent definitions. |
829| **Sessions** | Yes | Yes | View agent sessions and event history. |
830| **Environments** | Yes | Yes | View and manage cloud sandbox configurations for sessions. |
831| **Credential vaults** | Yes | Yes | View and manage credential vaults for session authentication. |
832| **Memory stores** | Yes | Yes | View and manage persistent agent memory. |
833| **Webhooks** | Yes | Yes | View and manage webhook endpoints. |
834| **API keys** | No | N/A | Manage API keys in the AWS Console (**Claude Platform on AWS → API keys**). See [API key authentication](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#api-key-authentication). |
835| **Members** | No | N/A | Not applicable. AWS IAM manages access. |
836| **Billing** | Yes (limited) | No | Set an organization monthly spend limit; see [Spend limits](https://platform.claude.com/docs/en/build-with-claude/claude-platform-on-aws#spend-limits). AWS Marketplace manages invoicing. View cost breakdowns on the **Cost** page. |
837| **Claude Code** | No | N/A | View Claude Code usage on the **Usage** page. |
835838
836839### Switching organizations
837840
from line 891
888891 # Omit the x-amz-security-token header if you use long-term IAM user credentials
889892 curl -i "https://aws-external-anthropic.us-west-2.api.aws/v1/messages" \
890893 --aws-sigv4 "aws:amz:us-west-2:aws-external-anthropic" \
891 --user "$AWS_ACCESS_KEY_ID:$AWS_SECRET_ACCESS_KEY" \
894 -u "$AWS_ACCESS_KEY_ID:$AWS_SECRET_ACCESS_KEY" \
892895 -H "x-amz-security-token: $AWS_SESSION_TOKEN" \
893896 -H "content-type: application/json" \
894897 -H "anthropic-version: 2023-06-01" \
No line in this hunk matches that.