What
Claude Code's gateway routes requests to model providers such as Amazon Bedrock and Google Cloud's Agent Platform (Vertex). Its check of managed settings, the settings an administrator sets centrally, now warns about:
- An
X-Amzn-Bedrock-GuardrailIdentifierheader, which the gateway does not pass on to Bedrock, so it has no effect unless a Bedrock upstream setsguardrail:. admin.pooled_priority_orderset whileadmin.pooled_conflict_ruleis notpriority_list, in which case it is ignored.- A model mapped to upstreams outside the policies that list it.
- GovCloud upstreams that share developers with non-GovCloud upstreams.
ANTHROPIC_BEDROCK_BASE_URLorANTHROPIC_VERTEX_BASE_URLin the gateway's environment applying to upstreams that have nobase_urlof their own.
An upstream is one of the provider endpoints the gateway sends requests to.
Why
Gateway operators find out early about settings that quietly do nothing, or that could send traffic across a GovCloud boundary they meant to keep separate.