AWS 上 Claude Platform 的多环境访问实现指南
AWS 发布 Claude Platform on AWS(CPonAWS)多环境访问实现指南,采用专用 AI Services 账户模式,通过三种方式接入推理:AWS 工作负载用跨账户 SigV4、开发者笔记本用工作区级 API key、外部环境用 OIDC 联合与短期密钥。所有环境共享单一订阅,并在生产与开发工作区之间实现隔离。
aged policy was detached. Part 4: OIDC federation for external workloads For workloads running on Google Cloud Platform (GCP), Kubernetes clusters outside AWS, or CI/CD pipelines (GitHub Actions, GitLab CI), OIDC federation authenticates them without storing AWS credentials. The flow: the external identity provider issues a token, and AWS Security Token Service (STS) exchanges it for temporary credentials. Those credentials then generate a short-lived CPonAWS bearer token. 4.1 Create an IAM OIDC
匹配字段正文


