antkawam

Claude Code AWS Gateway — DevOps skill for Claude Code

DevOps community intermediate

new Self-hosted API gateway that routes Claude Code through Amazon Bedrock with team API keys, budgets, rate limits, OIDC SSO, SCIM provisioning, and an admin portal for analytics.

How to install Claude Code AWS Gateway

This entry records only its repository, not the path inside it, so there is no exact command to give. Open antkawam/claude-code-aws-gateway and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Claude Code AWS Gateway does

[](https://github.com/antkawam/claude-code-aws-gateway/actions) [](https://github.com/antkawam/claude-code-aws-gateway/releases) [](https://crates.io/crates/ccag-cli) [](https://scorecard.dev/viewer/?uri=github.com/antkawam/claude-code-aws-gateway)

Alternatives in DevOps

Airis MCP Gateway — new Docker-based MCP multiplexer that aggregates 60+ tools behind 7 meta-tools, reducing context token usage b 142 ★
Opencode Kiro Auth — Stop hitting Claude limits 108 ★
Azure — Azure identity (Workload Identity, OIDC, Entra ID), resource tagging, AKS platform patterns, RBAC scoping, and 40 ★

README

Claude Code AWS Gateway (CCAG)

A purpose-built gateway for running [Claude Code](https://docs.anthropic.com/en/docs/claude-code) through Amazon Bedrock. Deploy once, then give every developer on your team a single command to get connected.

**For admins:** Real-time budget controls, multi-account routing for latency optimization and data sovereignty, OIDC SSO, and a full analytics dashboard — all from a built-in portal.

**For developers:** One-command onboarding. No AWS credentials, no config files. A self-service portal shows personal usage metrics, budget consumption, and virtual key management.

**For automation:** A management CLI (`ccag`) for scripting key provisioning, team setup, budget enforcement, and SCIM provisioning setup. Webhook, SNS, and EventBridge integrations for piping budget alerts and events into your existing tools.

**100% open source, every feature included.** No enterprise tier, no feature gates, no per-seat pricing.

Why CCAG?

When Claude Code connects to Bedrock directly (`CLAUDE_CODE_USE_BEDROCK=1`), it operates in a reduced-capability mode — extended thinking, web search, and some tool use features are disabled on the client side. CCAG presents as the Anthropic Messages API, so Claude Code enables its full feature set while inference still runs through your AWS account.

	Direct Bedrock	Through CCAG
Extended thinking	No	Yes
Tool use	Partial	Yes
Web search	No	Yes (DuckDuckGo, Tavily, Serper, or custom per user)
Multi-account/region routing	N/A	Pool quota across accounts, regions, and teams
Budget controls	N/A	Per-user and per-team limits (notify, throttle, or block)