Skip to main content
Claude Platform on AWS is the Anthropic-operated Claude API with AWS authentication, IAM access control, and AWS Marketplace billing. Requests reach Anthropic’s API directly, so you get the same models and API features as the Claude API on the same release schedule. Client-side features that Claude Code turns on through Anthropic’s feature-flag service, such as /loop self-pacing, are off by default, and the advisor tool is not available. See the feature availability matrix for the full list. You authenticate with AWS credentials or a workspace API key, and you pay through AWS Marketplace. Use this guide to point Claude Code at a workspace you’ve already provisioned through Claude Platform on AWS. For the AWS subscription and workspace setup that comes before this, see the Claude Platform on AWS documentation.
Subscribing through AWS Marketplace provisions a new Anthropic organization tied to your AWS account. This organization is separate from any organization you already have with Anthropic, and credentials don’t transfer between them. Use the workspace ID and API keys from the AWS-linked organization, not from a pre-existing Claude Console account.

​
Prerequisites

Before configuring Claude Code, you need:
  • An active Claude Platform on AWS subscription through AWS Marketplace
  • A workspace in your AWS-linked Anthropic organization, with its workspace ID
  • An IAM principal with permission to invoke the Anthropic service, or an API key scoped to the workspace
  • AWS credentials in your environment, in ~/.aws/credentials, or from an attached IAM role if you want SigV4 authentication. The AWS CLI is required only for the SSO login flow.

​
Setup

​
1. Configure AWS credentials

Claude Code supports two authentication methods for Claude Platform on AWS. Choose the method that fits how your team manages access. Option A: AWS credentials with SigV4 Claude Code signs requests with SigV4 using the standard AWS credential chain: environment variables, shared credentials in ~/.aws/credentials, IAM roles, AWS SSO sessions, and any other sources the AWS SDK supports. For local use, log in with the AWS CLI before starting Claude Code. The example below uses an SSO profile, but any method that produces credentials in the standard locations works.
For CI and automation, give the runner an IAM role with permission to invoke the Anthropic service and set AWS_REGION. The credential chain picks the role up automatically. If your SSO credentials expire mid-session, configure awsAuthRefresh so Claude Code re-runs your login command and retries instead of failing. Automatic refresh on Claude Platform on AWS requires Claude Code v2.1.198 or later; earlier versions stop with a prompt to run /login, which can’t refresh AWS credentials. Add the command to your settings file, such as ~/.claude/settings.json:
Claude Code also runs this command at startup when it can’t validate your existing AWS credentials, and shows the command’s output in an Authentication panel until the login completes. With awsAuthRefresh configured, /login shows a Claude Platform on AWS · refresh credentials option under Using 3rd-party platforms. Selecting it runs the configured command and re-reads your AWS credentials without restarting Claude Code. Option B: Workspace API key A workspace API key is a long-lived secret, useful when you don’t want to manage federated AWS credentials. Generate one in the AWS Console under Claude Platform on AWS → API keys and set it as ANTHROPIC_AWS_API_KEY: