Anthropic adds AWS governance gateway for Claude apps
Centralized control over 5 governance needs for 1M+ enterprise users
Anthropic has introduced the **Claude apps gateway** for AWS, a self-hosted governance layer designed to centralize control over authentication, model access, cost attribution, and spend enforcement for enterprise deployments of **Claude Code** and **Claude Desktop**.
The gateway runs as a stateless container on AWS Fargate or EKS, using Amazon RDS for PostgreSQL to store short-lived session state and spend counters. It integrates with OIDC identity providers for SSO and enforces policies via a YAML configuration. Requests flow through an internal ALB with TLS termination, while upstream credentials are securely managed via IAM roles and AWS Secrets Manager. Metrics are streamed to OpenTelemetry collectors for real-time monitoring. Administrators can enforce per-user spend limits and audit usage, ensuring consistent governance without distributing credentials to developer machines.
- Self-hosted gateway enforces 5 governance needs: SSO auth, model access control, cost attribution, spend enforcement, and audit trails
- Runs on AWS Fargate/EKS with PostgreSQL for state, integrates with OIDC SSO and OpenTelemetry for metrics
- Distributes short-lived bearer tokens (1-hour TTL) and enforces per-user spend limits via RDS counters
Why It Matters
Enterprise teams can now deploy Claude apps at scale with consistent governance, cost control, and zero credential sprawl.