The whole hunk
from line 28, old and new numbered
/
lines
from line 28
2828 customer-managed encryption key (CMEK) on AWS, reference this value in your
2929 KMS key-policy condition so the key is scoped to this compartment. On GCP and
3030 Azure, Anthropic enforces the compartment binding automatically; you do not
31 need to reference this value in your key configuration. See the CMEK integration guide for the
32 required key configuration, including the value used during key validation.
31 need to reference this value in your key configuration. See the CMEK
32 integration guide for the required key configuration; unless your organization
33 is on Claude Platform on AWS, it includes a separate value used during key
34 validation. On Claude Platform on AWS there is no separate validation value:
35 the key is validated against this Workspace's own value when it is attached, so
36 if your key policy uses the compartment condition, add this value to it before
37 attaching the key.
3338
3439 - `created_at: string`
3540
from line 71
6671 ID of the customer-managed encryption key (CMEK) configuration to use for this
6772 Workspace. Setting this field requires CMEK to be enabled for your
6873 organization. When set, data stored for this Workspace is encrypted with the
69 referenced key. Create key configurations with the External Keys API. This
70 field is write-once: once a key is attached to a Workspace it cannot be
71 detached or replaced. To rotate key material, rotate the underlying key on
72 your cloud KMS; the `external_key_id` stays the same.
74 referenced key. Create key configurations with the External Keys API. On
75 Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a
76 single-Region key in the same AWS account and Region as the Workspace. On that
77 platform the key is validated against this Workspace when it is attached, so a
78 key-policy problem is reported as an error on this request. This field is write-once:
79 once a key is attached to a Workspace it cannot be detached or replaced. To
80 rotate key material, rotate the underlying key on your cloud KMS; the
81 `external_key_id` stays the same.
7382
7483 - `name: string`
7584