What happened
AWS and Anthropic have released Claude apps gateway, a self-hosted governance layer that runs on AWS Fargate (or EKS or EC2) to centralize authentication, model access, cost tracking, and spend limits for Claude Code and Claude Desktop deployments. The gateway authenticates users via OIDC identity providers, validates requests server-side, routes inference to Amazon Bedrock or Claude Platform on AWS, and forwards usage telemetry via OpenTelemetry Protocol.
Why it matters
Enterprise teams deploying Claude across their workforce can now enforce consistent controls without distributing upstream credentials to developer machines. Single sign-on through existing identity providers (Okta, Microsoft Entra ID, Auth0, Keycloak, Amazon Cognito) enables instant offboarding, per-group policy enforcement (e.g., restricting contractors to Claude Haiku, denying web access), and per-user spend caps—reducing operational overhead and security risk at scale.
What to watch
The gateway enforces model access server-side, so developers cannot bypass restrictions by modifying clients. Bearer tokens are valid for one hour by default and refresh silently in the background. Deployment scripts, configuration templates, and operational guidance are available in the accompanying repository and deployment guide.
Summaries like this, in your inbox every morning.
The Claude apps gateway addresses a critical gap in enterprise AI deployment: the need to govern model access, costs, and identity at scale without distributing sensitive credentials to individual developers. Rather than relying only on account-level cost visibility tools like AWS Budgets and AWS Cost Explorer, the gateway provides inline spend enforcement before inference occurs, along with per-developer usage attribution. By delegating authentication to existing OIDC identity providers, it integrates seamlessly into existing organizational identity management, allowing IT teams to manage Claude access through the same groups and policies they already maintain for other enterprise systems.
The reference architecture demonstrates how to run the gateway as a stateless service on AWS Fargate, with session and spend state stored in Amazon RDS for PostgreSQL. This design allows any Fargate task to serve any request without sticky sessions, simplifying operations and enabling automatic failover. The gateway sits between Claude applications (running on developer machines) and backend inference providers (Amazon Bedrock or Claude Platform on AWS), giving enterprises a policy enforcement point they control.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
Meta will link Naver Map's walking-navigation feature to its Ray-Ban Meta and Oakley Meta AI glasses in 2026…
Anthropic's new study says that if robot prices decline along past trends, it will take 40 years for robots to…
Flow Engineering announced a $50 million Series B at a $750 million valuation, co-led by Antonio Gracias and G…
Ramp economist Ara Kharazian says US firms are spending less on AI even as usage rose about 50 percent from Ju…
Microsoft AI launched MAI-Transcribe-2-Streaming, which Microsoft says ranks first for accuracy on Artificial…
ELYZA said it is launching "ELYZA RSI Research", and that for LLMs of 100 billion parameters or fewer it has r…
