Overview
Claude Apps Gateway gives enterprises centralized control over Claude Code adoption.
Deploy this self-hosted control plane to:
- Replace per-developer API keys with corporate SSO (OIDC)
- Control which models each team can access
- Set daily/weekly/monthly spend caps per user or group
- Route inference through your own Bedrock account (data stays in your VPC)
- Stream usage telemetry to your OTLP collector (CloudWatch, Datadog, etc.)
- Offboard developers instantly by removing them from your IdP
The gateway runs as a single stateless container backed by PostgreSQL. It holds your Bedrock credential and routes requests on behalf of developers. No long-lived secrets on developer machines.
Pre-installed with PostgreSQL and template configuration. Attach an IAM role, configure your OIDC provider, and your team is connected.
Highlights
- Replace per-developer API keys with corporate SSO - centralized Claude Code access control
- Per-user spend limits, model access by IdP group, and OTLP telemetry to your collector
- Route through your own Bedrock account - data stays in your VPC, instant offboarding via IdP
Details
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
Pricing
Dimension | Description | Cost/hour |
|---|---|---|
t3.medium Recommended | t3.medium instance | $0.08 |
t3.micro | t3.micro instance | $0.00 |
t3.large | t3.large instance | $0.08 |
m5.large | m5.large instance | $0.08 |
r5.large | r5.large instance | $0.08 |
m5.xlarge | m5.xlarge instance | $0.08 |
Vendor refund policy
No refunds. Cancel anytime. Contact support@waltsoft.net .
How can we make this page better?
Legal
Vendor terms and conditions
Content disclaimer
Delivery details
64-bit (x86) Amazon Machine Image (AMI)
Amazon Machine Image (AMI)
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Claude Apps Gateway - self-hosted control plane for Claude Code on AWS Bedrock.
Additional details
Usage instructions
Quick Start
- Launch on t3.medium or larger
- SSH in: ssh ubuntu@YOUR_PUBLIC_IP
- Edit config: sudo nano /opt/claude-gateway/gateway.yaml
- Set your OIDC provider details (Okta, Entra ID, Google Workspace)
- Edit secrets: sudo nano /etc/claude-gateway.env
- Attach IAM role with bedrock:InvokeModel* permissions to this instance
- Run: sudo /opt/claude-gateway/setup.sh
- Place behind internal ALB with HTTPS (required - Claude Code needs private network)
What's Included
- Claude Apps Gateway (Anthropic's official control plane for Claude Code)
- PostgreSQL 16 pre-configured (stores auth state + spend counters)
- Template gateway.yaml with all options documented
- Systemd service with auto-restart
Prerequisites (You Provide)
- OIDC identity provider (Okta, Azure AD, Google Workspace, Keycloak)
- IAM role: bedrock:InvokeModel* + bedrock:InvokeModelWithResponseStream*
- Internal ALB with HTTPS + ACM certificate
- Claude Code v2.1.195+ on developer machines
What This Gives Your Team
- SSO sign-in for Claude Code (no individual API keys)
- Centralized model access control by IdP group
- Per-user/group spend limits (daily, weekly, monthly)
- OTLP telemetry to your own collector
- Multi-region Bedrock routing with failover
- Instant offboarding (remove from IdP = access revoked)
Ports
- 80: Setup instructions (this page)
- 8080: Gateway (after configuration)
- 22: SSH (ubuntu)
Documentation
- https://code.claude.com/docs/en/claude-apps-gateway
- https://code.claude.com/docs/en/claude-apps-gateway-config
Support
Support
Vendor support
Email support@waltsoft.net or visit
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.