The whole hunk
from line 48, old and new numbered
/
lines
from line 48
4848 customer-managed encryption key (CMEK) on AWS, reference this value in your
4949 KMS key-policy condition so the key is scoped to this compartment. On GCP and
5050 Azure, Anthropic enforces the compartment binding automatically; you do not
51 need to reference this value in your key configuration. See the CMEK integration guide for the
52 required key configuration, including the value used during key validation.
51 need to reference this value in your key configuration. See the CMEK
52 integration guide for the required key configuration; unless your organization
53 is on Claude Platform on AWS, it includes a separate value used during key
54 validation. On Claude Platform on AWS there is no separate validation value:
55 the key is validated against this Workspace's own value when it is attached, so
56 if your key policy uses the compartment condition, add this value to it before
57 attaching the key.
5358
5459 - `created_at: string`
5560
from line 91
8691 ID of the customer-managed encryption key (CMEK) configuration to use for this
8792 Workspace. Setting this field requires CMEK to be enabled for your
8893 organization. When set, data stored for this Workspace is encrypted with the
89 referenced key. Create key configurations with the External Keys API. This
90 field is write-once: once a key is attached to a Workspace it cannot be
91 detached or replaced. To rotate key material, rotate the underlying key on
92 your cloud KMS; the `external_key_id` stays the same.
94 referenced key. Create key configurations with the External Keys API. On
95 Claude Platform on AWS the value is the AWS KMS key ARN, and the key must be a
96 single-Region key in the same AWS account and Region as the Workspace. On that
97 platform the key is validated against this Workspace when it is attached, so a
98 key-policy problem is reported as an error on this request. This field is write-once:
99 once a key is attached to a Workspace it cannot be detached or replaced. To
100 rotate key material, rotate the underlying key on your cloud KMS; the
101 `external_key_id` stays the same.
93102
94103 - `name: string`
95104