List External Keys changedapi/beta/organization/external_keys/list
Nearest release: v2.1.315, published under an hour before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.
Recorded here
Lines+10added
Lines−5removed
From line
42
where the diff opens
First seen
26 Aug 2026
this site's first read of the page
Recorded edits9to this page, all time
The whole hunk
from line 42, old and new numbered
/
from line 42
4242
4343 - `id: string`
4444
45 Identifier of the external key config. A tagged ID prefixed `ekey_`, or — for organizations on the Claude Platform on AWS — the AWS KMS key ARN.
45 Identifier of the external key config: a tagged ID prefixed `ekey_`, or, on Claude Platform on AWS, an AWS KMS key's ARN.
4646
4747 - `attachment: BetaExternalKeyAttachedAttachment or BetaExternalKeyUnattachedAttachment`
4848
from line 70
7070
7171 - `geo: string`
7272
73 Data residency geo. Selects which regional validator handles this key's encrypt/decrypt roundtrips.
73 Data residency geo. Selects the region that handles this key's encrypt/decrypt roundtrips.
7474
7575 - `provider_config: BetaAWSExternalKeyConfig or BetaGCPExternalKeyConfig or BetaAzureExternalKeyConfig`
7676
from line 82
8282
8383 - `kms_arn: string`
8484
85 Full ARN of the AWS KMS key. On Claude Platform on AWS the key must be a single-Region key in your organization's own AWS account; cross-account keys, multi-Region keys, and alias ARNs are rejected.
85 Full ARN of the AWS KMS key. On Claude Platform on AWS, alias ARNs are rejected, and your organization's own key must be a single-Region key in your organization's AWS account.
8686
8787 maxLength: 2048
8888
from line 94
9494
9595 **Deprecated**
9696
97 IAM role ARN. Deprecated — Anthropic reaches the KMS key through its own intermediate role (or, on Claude Platform on AWS, with credentials AWS issues for the Workspace); this field is ignored.
97 IAM role ARN. Deprecated; this field is ignored.
9898
9999 - `BetaGCPExternalKeyConfig object`
100100
from line 128
128128
129129 format: date-time
130130
131 - `user_profile_id: string or null`
132
133 ID of the user profile the key is bound to, or null if the key is not bound to one. A key bound to a user profile can only be attached to a Workspace that has the same user profile. A key that isn't bound can be attached to a Workspace whatever its user profile.
134
131135- `next_page: string or null`
132136
133137 Opaque cursor for the next page, or null if no more results. Pass as `?page=` to fetch the next page.
from line 164
160164 "role_arn": "arn:aws:iam::111122223333:role/anthropic-cmek"
161165 },
162166 "type": "external_key",
163 "updated_at": "2024-10-30T23:58:27.427722Z"
167 "updated_at": "2024-10-30T23:58:27.427722Z",
168 "user_profile_id": "uprof_01SDCCSbTxrXDpWc1phhtcfK"
164169 }
165170 ],
166171 "next_page": "next_page"
No line in this hunk matches that.