Claude Code AWS Gateway

Claude Code AWS Gateway (CCAG)

[](https://github.com/antkawam/claude-code-aws-gateway/actions) [](https://github.com/antkawam/claude-code-aws-gateway/releases) [](https://crates.io/crates/ccag-cli) [](https://scorecard.dev/viewer/?uri=github.com/antkawam/claude-code-aws-gateway) [](LICENSE)

A purpose-built gateway for running [Claude Code](https://docs.anthropic.com/en/docs/claude-code) through Amazon Bedrock. Deploy once, then give every developer on your team a single command to get connected.

**For admins:** Real-time budget controls, multi-account routing for latency optimization and data sovereignty, OIDC SSO, and a full analytics dashboard — all from a built-in portal.

**For developers:** One-command onboarding. No AWS credentials, no config files. A self-service portal shows personal usage metrics, budget consumption, and virtual key management.

**For automation:** A management CLI (`ccag`) for scripting key provisioning, team setup, budget enforcement, and SCIM provisioning setup. Webhook, SNS, and EventBridge integrations for piping budget alerts and events into your existing tools.

**100% open source, every feature included.** No enterprise tier, no feature gates, no per-seat pricing.

Why CCAG?

When Claude Code connects to Bedrock directly (`CLAUDE_CODE_USE_BEDROCK=1`), it operates in a reduced-capability mode — extended thinking, web search, and some tool use features are disabled on the client side. CCAG presents as the Anthropic Messages API, so Claude Code enables its full feature set while inference still runs through your AWS account.

	Direct Bedrock	Through CCAG
Extended thinking	No	Yes
Tool use	Partial	Yes
Web search	No	Yes (DuckDuckGo, Tavily, Serper, or custom per user)
Multi-account/region routing	N/A	Pool quota across accounts, regions, and teams
Budget controls	N/A	Per-user and per-team limits (notify, throttle, or block)

...