Create External Key changedapi/beta/organization/external_keys/create
Nearest release: v2.1.315, published under an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+18added
Lines−8removed
From line
29
where the diff opens
First seen
26 Aug 2026
this site's first read of the page
Recorded edits9to this page, all time
The whole hunk
from line 29, old and new numbered
/
from line 29
2929
3030 - `kms_arn: string`
3131
32 Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected.
32 Full ARN of the AWS KMS key. On Claude Platform on AWS, alias ARNs are rejected, and your organization's own key must be a single-Region key in your organization's AWS account.
3333
3434 maxLength: 2048
3535
from line 41
4141
4242 **Deprecated**
4343
44 IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored.
44 IAM role ARN. Deprecated; this field is ignored.
4545
4646 - `BetaGCPExternalKeyConfig object`
4747
from line 83
8383
8484 Data residency geo. Only `us` is supported.
8585
86- `user_profile_id: optional string or null`
87
88 ID of a user profile to bind the key to. Omit this field for a key that isn't bound to a user profile. Such a key can be attached to a Workspace whatever its user profile. The binding cannot be changed later. A key bound to a user profile can only be attached to a Workspace that has the same user profile.
89
8690## Returns
8791
8892- `BetaExternalKey object`
from line 103
99103
100104 - `id: string`
101105
102 Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN.
106 Identifier of the external key config: a tagged ID prefixed `ekey_`, or, on Claude Platform on AWS, an AWS KMS key's ARN.
103107
104108 - `attachment: BetaExternalKeyAttachedAttachment or BetaExternalKeyUnattachedAttachment`
105109
from line 131
127131
128132 - `geo: string`
129133
130 Data residency geo. Selects which regional validator handles this key's encrypt/decrypt roundtrips.
134 Data residency geo. Selects the region that handles this key's encrypt/decrypt roundtrips.
131135
132136 - `provider_config: BetaAWSExternalKeyConfig or BetaGCPExternalKeyConfig or BetaAzureExternalKeyConfig`
133137
from line 143
139143
140144 - `kms_arn: string`
141145
142 Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected.
146 Full ARN of the AWS KMS key. On Claude Platform on AWS, alias ARNs are rejected, and your organization's own key must be a single-Region key in your organization's AWS account.
143147
144148 maxLength: 2048
145149
from line 155
151155
152156 **Deprecated**
153157
154 IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored.
158 IAM role ARN. Deprecated; this field is ignored.
155159
156160 - `BetaGCPExternalKeyConfig object`
157161
from line 189
185189
186190 format: date-time
187191
192 - `user_profile_id: string or null`
193
194 ID of the user profile the key is bound to, or null if the key is not bound to one. A key bound to a user profile can only be attached to a Workspace that has the same user profile. A key that isn't bound can be attached to a Workspace whatever its user profile.
195
188196## Example
189197
190198```bash
from line 204
196204 "provider_config": {
197205 "kms_arn": "arn:aws:kms:us-east-1:111122223333:key/abcd1234-5678-90ab-cdef-000011112222",
198206 "type": "aws"
199 }
207 },
208 "user_profile_id": "uprof_01SDCCSbTxrXDpWc1phhtcfK"
200209 }'
201210```
202211
from line 227
218227 "role_arn": "arn:aws:iam::111122223333:role/anthropic-cmek"
219228 },
220229 "type": "external_key",
221 "updated_at": "2024-10-30T23:58:27.427722Z"
230 "updated_at": "2024-10-30T23:58:27.427722Z",
231 "user_profile_id": "uprof_01SDCCSbTxrXDpWc1phhtcfK"
222232}
223233```
224234
No line in this hunk matches that.