Introducing the Claude apps gateway for Amazon Bedrock and Google Cloud

2026-06-29 · Source: Claude Blog · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Cloud Computing & IT Infrastructure, Software Development & Engineering · Depth: Intermediate, quick

Summary

Anthropic has introduced the Claude apps gateway, a self-hosted control plane designed for managing Claude Code deployments on Amazon Bedrock and Google Cloud. This gateway addresses previous challenges like per-developer credential provisioning and manual settings distribution by offering corporate SSO login, centrally enforced policy, role-based access, and per-user cost attribution. It operates as a single stateless container on Linux, backed by a PostgreSQL database, and integrates with identity providers such as Google Workspace, Microsoft Entra ID, or Okta via OpenID Connect (OIDC). The gateway handles developer identity, enforces managed settings like allowed models, relays per-request usage telemetry via OTLP, routes inference requests to Claude API or cloud providers with optional failover, and enables setting daily, weekly, or monthly spend caps per organization, group, or user. It does not send inference traffic or usage data to Anthropic unless configured for the Claude API.

Key takeaway

For AI Architects or MLOps Engineers managing Claude Code deployments, the new apps gateway simplifies governance and cost control. You can centralize identity, enforce model usage policies, and track per-user spend across Amazon Bedrock or Google Cloud. This reduces operational overhead and enhances security by eliminating individual credential management. Consider deploying the gateway to streamline developer onboarding and ensure compliance with organizational AI usage policies.

Key insights

The Claude apps gateway centralizes management and cost attribution for Claude Code on cloud platforms, enhancing security and control.

Principles

• Centralized policy enforcement improves security.
• Per-user cost attribution drives accountability.
• Stateless container deployment simplifies scaling.

Method

Deploy a stateless Linux container with PostgreSQL, configure OIDC for SSO, and set "managed-settings.json" on client machines to connect to the gateway.

In practice

• Enforce specific Claude models for different teams.
• Monitor individual developer Claude API spend.
• Implement failover between Claude API and Bedrock.

Topics

• Claude API
• Amazon Bedrock
• Google Cloud
• Identity Management
• Cost Management
• Policy Enforcement
• Cloud AI Management

Best for: CTO, VP of Engineering/Data, AI Architect, MLOps Engineer, Director of AI/ML

Related on AIssential

• Giving Developers Claude Code with Azure API Management and Claude Models in Microsoft Foundry — Centralize "Claude Code" access via Azure APIM to manage authentication, usage, and cost for developers.
• Extending MCP support for Amazon Bedrock AgentCore Gateway — AgentCore Gateway centralizes MCP server governance, enabling scalable, secure, and stateful enterprise agent workflows.
• The full Claude Desktop experience on AWS, Google Cloud, and Microsoft Foundry — Claude Desktop now offers a unified, secure, and flexible enterprise deployment across major cloud platforms.
• Simplify multi-account access to Amazon Bedrock models with managed entitlements — Managed entitlements centralize third-party model subscriptions for Amazon Bedrock, distributing access across AWS Organizations without per-account Marketplace permissions.
• v2.1.97 — Claude Code prioritizes security, performance, and extensibility through continuous iterative improvements and new feature introductions.
• How I Use Bifrost MCP Gateway and Code Mode to Give Claude Code Safer MCP Access with Lower Token Cost — Bifrost's MCP Gateway and Code Mode enhance Claude Code's tool use with governance, cost reduction, and scalable orchestration.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Claude Blog.