Anthropic's new AWS gateway puts SSO and spend caps in front of Claude Code
Claude apps gateway for AWS is a self-hosted access, spend, and policy layer for Claude Code and Claude Desktop. It ships inside the Claude Code CLI itself and runs as a single stateless container backed by PostgreSQL.
Auth goes through any OIDC-compatible provider. After a browser SSO handshake the gateway issues a short-lived token, one hour by default, so pulling someone from the directory kills their access within that window.
Admins set daily, weekly, and monthly spend limits per organization, group, or user. Blow through one and the gateway blocks requests until the period resets.
Configuration is a single YAML file, and the gateway routes requests to either Amazon Bedrock or Claude Platform on AWS. Model IDs match the Anthropic API: claude-sonnet-5, claude-opus-4-8.
Related stories
- Claude Enterprise adds admin analytics and cost controls
- Samsung with Claude: "Design and verification shortened to 2 days from a month"
- UST puts Claude Code to work reading chip pinouts and writing regression tests
- Claude Code 2.1.283 keeps new models out until admins say so
- Claude went from bug hunt to abuse report on New Year's Eve
- Claude Code 2.1.281 adds Bedrock guardrails to its gateway
Comments
No comments yet. Be the first.
Join the conversation
Sign in with Google to leave a comment. Your name and avatar come from your Google profile, and the comment appears after moderation.