Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run Scan×
Skip to content
World desk6 min

What Government Teams Should Know Before Using Claude Code in AWS GovCloud

Claude Code can use Claude models through Amazon Bedrock in AWS GovCloud, but teams must separately verify model authorization, endpoint features, routing, IAM access, and agency approval.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Government teams can use Claude Code with Claude models on Amazon Bedrock in AWS GovCloud, but the service’s regional availability does not, by itself, authorize a particular model, data type, or development workload. Before rollout, teams need to enable model access, choose the right Bedrock endpoint and inference route, configure IAM and credentials, and obtain approval for the exact deployment within their agency’s authorization boundary.

How Claude Code works with Bedrock in GovCloud

Claude Code is the local coding client; Amazon Bedrock provides model inference. The client runs on a developer’s machine, but prompts and model outputs travel over the network to the selected provider. This is not the same service boundary as Claude for Government, and installing Claude Code locally does not make the model interaction local-only.

As an Amazon Associate I earn from qualifying purchases.

AWS says Bedrock is available in AWS GovCloud (US-West) and AWS GovCloud (US-East). Its October 2026 Claude Code setup guide describes the Bedrock runtime endpoint in both regions and Bedrock Mantle in US-West for the models covered by that guide. Those are service and guide-specific availability statements, not approval for every model or workload.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Separate regional availability from authorization

Check three separate questions before sending government data to a model: whether Bedrock is available in the target GovCloud region; whether the specific model is available and authorized in that environment; and whether the agency has approved the precise use case, data classification, and configuration. AWS maintains model availability and model-specific FedRAMP and DoD Cloud Computing Security Requirements Guide (CSP SRG) status separately. A model being selectable in Bedrock does not settle the agency’s authorization decision.

AWS’s October 2026 deployment guide reports that Claude Sonnet 5 has FedRAMP Class D (formerly High) and DoD IL4/IL5 authorization on Bedrock, and that Claude Opus 5.5 and Claude Sonnet 5.5 have FedRAMP Class D certification on Bedrock. These claims apply to the models and Bedrock deployment described, not automatically to other Claude models, regions, contracts, or customer workloads. Confirm the current AWS model-specific status and the boundary that covers your deployment before relying on an authorization label.

Anthropic describes Claude models as software components rather than cloud services that carry a FedRAMP or DoD impact-level authorization on their own. The authorization belongs to the applicable service environment and approved deployment. Accordingly, avoid describing “Claude” as authorized without naming the offering and boundary.

Choose the endpoint based on features and region

AWS’s October 2026 guide presents two endpoint paths. The feature choice matters: AWS says Guardrails and invocation logging are available only through bedrock-runtime, and recommends runtime for many new applications, particularly those that need audit trails.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Decision bedrock-runtime bedrock-mantle
GovCloud regions in AWS’s October 2026 guide US-West and US-East US-West
API surface AWS SDK InvokeModel or Converse Anthropic Messages API natively
Guardrails and invocation logging Available Not available, according to the guide
Practical fit to evaluate Teams that need the documented logging and Guardrails features Teams that need the native Messages API and can work within the documented feature and regional limits

Endpoint selection is only one routing decision. AWS distinguishes in-region inference, which stays in the selected region, from geographic cross-region routing and global cross-region routing, which can send requests beyond that region. For a strict locality requirement, verify that the precise model and endpoint support in-region inference and confirm the behavior of the chosen model identifier or inference profile. A broad label such as “US” or “GovCloud” does not establish where every request is processed.

Prepare model access through the linked accounts

AWS’s GovCloud model-access instructions require the access process to begin through the standard AWS account linked to the GovCloud account. The team accepts the model’s end-user license agreement (EULA) in a standard region—us-east-1 or us-west-2—and then enables the model in the GovCloud account. AWS documents console and CLI routes; allow for entitlement propagation, which may take a few minutes.

Complete this access work before troubleshooting Claude Code configuration. A valid AWS login alone does not mean that the desired model has been enabled for the GovCloud account.

Configure Claude Code for the selected endpoint

AWS’s October 2026 guide lists Claude Opus 5.5, Claude Sonnet 5.5, and Claude Sonnet 5 for its GovCloud setup. Model identifiers and regional availability can change, so verify the current AWS matrix and guide before deployment. The following is the guide’s manual Sonnet 5.5 configuration for runtime in GovCloud US-West:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
export CLAUDE_CODE_USE_BEDROCK=1
export AWS_REGION='us-gov-west-1'
export ANTHROPIC_MODEL='us-gov.anthropic.claude-sonnet-5-5'

The guide also shows an alternate Opus model identifier and supports model pinning for consistent team configurations. Confirm the exact current identifier and authorization for the selected model before pinning it; a pin does not guarantee future availability.

For the Mantle endpoint, AWS shows this endpoint selection variable with the GovCloud US-West region:

export CLAUDE_CODE_USE_MANTLE=1
export AWS_REGION='us-gov-west-1'

The configuration still needs the appropriate AWS credentials, model selection, and permissions for the selected path. Do not use Mantle if the compliance design depends on the Guardrails or invocation logging that AWS documents only for runtime.

AWS also documents an interactive /login wizard: choose a third-party platform, select Amazon Bedrock, then choose authentication, region, and model pins. Menu wording and supported model choices may change; use the current AWS guide for the exact prompts. After setup, use Claude Code’s /status command to check which provider and model are configured.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Set up identity and least-privilege permissions

AWS lists an AWS GovCloud account with Bedrock access, enabled model access, AWS CLI, and valid short-term credentials or an AWS IAM Identity Center login among the prerequisites. For organizational deployment, AWS recommends IAM Identity Center and temporary role-based credentials rather than static access keys.

For runtime, AWS lists these minimum Bedrock actions in its guide:

  • bedrock:InvokeModel
  • bedrock:InvokeModelWithResponseStream
  • bedrock:ListInferenceProfiles
  • bedrock:GetInferenceProfile

Mantle requires a different permission set, including bedrock-mantle:CreateInference and permissions to list and retrieve models and projects. Use the current AWS guide to identify the full set for the chosen configuration, then scope policy access to the endpoint and model the team needs. Do not assume that runtime permissions also grant Mantle access, or vice versa.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Review data flow and local tool access

Anthropic’s Claude Code documentation states that sessions run locally while prompts and model outputs are sent over the network to the model provider. It documents TLS 1.2 or later in transit and, for Amazon Bedrock, AES-256 at rest using AWS-managed keys; customer-managed AWS KMS keys are available. These protections describe transport and storage encryption, not every location where information may appear during development.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Before enabling Claude Code for a repository, review how the client’s tools can read and edit files or run commands. Anthropic documents permission prompts and advises users to review proposed code and commands. Configure tool permissions to fit the repository’s sensitivity and the team’s change-control process.

  • Determine whether prompts, outputs, repository content, or generated code can contain regulated data, secrets, or other restricted information.
  • Review local transcript retention, credentials, telemetry, proxy and firewall paths, and how logs are collected, retained, and accessed.
  • Check that invocation logging and Guardrails are configured if required by the agency’s controls; AWS documents those features for runtime, not Mantle.
  • Confirm that inference routing, endpoint, model, and region match the approved data-residency design.

Distinguish Bedrock from Claude for Government

Anthropic’s public-sector FAQ describes Claude for Government as a separate FedRAMP High offering and says it includes Claude Code in the Desktop app, with sign-in and inference inside that offering’s FedRAMP High boundary. Claude through Bedrock in GovCloud is a different deployment: its applicable authorizations depend on AWS’s Bedrock environment and the individual model. Anthropic’s FAQ says Claude through Bedrock in GovCloud can be used for FedRAMP High and DoD IL4/IL5 workloads, while also noting that AWS authorizes Bedrock models separately.

Anthropic’s FAQ further directs teams handling ITAR-controlled data to use Claude through Bedrock in GovCloud. That platform guidance does not replace the agency’s authorization process or establish that every GovCloud model, endpoint, or configuration is approved for ITAR data. Resolve the exact boundary with your agency’s security and authorization teams.

Pre-deployment decision checklist

  • Confirm agency approval for the exact model, endpoint, region, data type, and development use case.
  • Complete the linked-account EULA and GovCloud model-enablement steps.
  • Choose runtime or Mantle based on required API, logging, Guardrails, and regional availability.
  • Verify inference locality and any cross-region routing against residency requirements.
  • Use scoped IAM permissions and temporary credentials where practical.
  • Set and review tool permissions, transcript handling, credential exposure, network paths, telemetry, and logs.
  • Pin models only after confirming their current availability and authorization, and recheck both before rollout.

Model availability, endpoint features, identifiers, and compliance status are changeable. AWS’s current regional model and compliance listings, together with the agency’s own authorization records, should govern production decisions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.