AWS hosts a partner's API outside its own security boundary — a first at this scale
The most consequential thing about Claude Platform on AWS is not the feature list. It is the data-boundary inversion. For the first time, AWS is publicly distributing a partner's native API where the partner — not AWS — is the data processor, and customer prompts and completions traverse outside the AWS security perimeter [2]. On Amazon Bedrock, AWS sits inside the boundary as the operator of record; on Claude Platform on AWS, Anthropic operates the service and AWS provides only the access and billing layer [6].
The architectural trick that makes this palatable to enterprise buyers is grafting AWS-native identity and audit primitives onto an externally operated API. Authentication is SigV4-signed using IAM credentials under a new service namespace, aws-external-anthropic, with actions like aws-external-anthropic:CreateInference flowing through normal IAM policies and SCPs [1]. CloudTrail captures the API activity, Marketplace handles billing in Claude Consumption Units invoiced on the AWS bill, and existing AWS commit-spend agreements can be drawn down against Claude usage [1]. The control plane feels like AWS; the data plane is Anthropic. That separation is novel, and it is the template every other foundation-model vendor will now study.


