I built an open-source gateway specific for running Claude Code on AWS. Currently when Claude code on Bedrock has limitations such as no web search, and rudimentary observability and user spend/attribution - atleast without deploying or building your own extensions. LiteLLM proxy is most similar to this, but for a lot of companies who only need it for CC, it’s overkill. So I built CCAG (Claude Code AWS Gateway). It sits between Claude Code and Bedrock, presents itself as the Anthropic Messages API, and Claude Code enables its full feature set. Inference still runs through your AWS account. What you get out of the box: Web search (DuckDuckGo/Tavily/Serper/custom per user) Virtual API keys so your devs don’t need AWS credentials Per-user and per-team budgets (notify, throttle, or hard block) Multi-account/region routing with failover and sticky user routing for cache affinity OIDC SSO (Okta, Azure AD, Google, whatever has a .well-known endpoint) Admin portal with spend analytics, model mix, latency percentiles, tool usage tracking One-command dev onboarding from a Connect page in the portal Webhook, SNS, EventBridge for budget alerts Written in Rust (axum), adds about 1-5ms overhead. Deploy with Docker Compose or AWS CDK (Fargate + RDS) Free, MIT licensed, every feature included. No enterprise tier or feature gates. Still early days - published yesterday, very much a passion project. Next up is custom guardrails (input/output validation rules) and SMTP for budget notifications so you don’t need SNS. Would love feedback, feature requests, or just to hear if others are hitting the same Bedrock limitations. GitHub: https://github.com/antkawam/claude-code-aws-gateway Docs: https://antkawam.github.io/claude-code-aws-gateway submitted by /u/antimoto
Originally posted by u/antimoto on r/ClaudeCode