AWS Releases Reference Architecture for Enterprise Claude Apps Gateway
AWS ML Blog · rss · 2026-08-11
The AWS Machine Learning Blog published a reference architecture for deploying the Anthropic Claude apps gateway for enterprise workloads. The gateway provides administrators with centralized governance features like authentication, model access control, cost attribution, and spend enforcement for deploying Claude Code and Claude Desktop at scale.
Architecture & Deployment: The gateway runs as a stateless container on AWS Fargate (EKS/EC2 also supported), using RDS for PostgreSQL for short-lived sign-in state and spend counters. It terminates TLS via an internal ALB and resolves via Route 53 private hosted zones. It authenticates to Amazon Bedrock using IAM roles, keeping static credentials in Secrets Manager so no upstream credentials reside on developer machines.
Governance Features:
- Identity: Supports SSO via OIDC providers (Okta, Microsoft Entra ID, etc.) without maintaining a separate user directory.
- Policy: Centralizes model and tool permissions via YAML configuration, supporting group-based fine-grained access control (e.g., restricting contractors to Haiku-only with no web access).
More from coding & agent
- Gemini for Go Developers: Model Selection and Agent Development Guide — rseroter · 2026-08-12
- Mojo 1.0 Released: The Systems Language for the AI Era — clattner_llvm · 2026-08-12
- NVIDIA Tutorial: Deploying VLA Models for Robot Manipulation with LeRobot and ROS 2 — NVIDIA Developer · 2026-08-12
- Solving RAG Bottlenecks: A 2026 Open-Source Guide to PDF Table Parsing — AvenueJay · 2026-08-12
- Google Says AI Writes 75% of Code; Sonar Targets the Verification Gap — LinusEkenstam · 2026-08-12
- Solo Dev Outperforms 10-Person Team Using AI Coding Agents — teodorio · 2026-08-12