AnthropicLimitedAccess

Last Modified

Oct 2, 2026

October 2, 2026 at 05:02 PM UTC

Version

v8

Total Versions

9

Created

Oct 2, 2026

Actions

47

Policy Document

View on GitHub
{
  "PolicyVersion": {
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "AnthropicLimitedWorkspace",
          "Effect": "Allow",
          "Action": [
            "aws-external-anthropic:Get*",
            "aws-external-anthropic:List*",
            "aws-external-anthropic:ArchiveAgent",
            "aws-external-anthropic:ArchiveEnvironment",
            "aws-external-anthropic:ArchiveMemoryStore",
            "aws-external-anthropic:ArchiveSession",
            "aws-external-anthropic:ArchiveVault",
            "aws-external-anthropic:CancelBatchInference",
            "aws-external-anthropic:CountTokens",
            "aws-external-anthropic:CreateAgent",
            "aws-external-anthropic:CreateBatchInference",
            "aws-external-anthropic:CreateEnvironment",
            "aws-external-anthropic:CreateFile",
            "aws-external-anthropic:CreateInference",
            "aws-external-anthropic:CreateMemoryStore",
            "aws-external-anthropic:CreateSession",
            "aws-external-anthropic:CreateSkill",
            "aws-external-anthropic:CreateVault",
            "aws-external-anthropic:CreateWebhook",
            "aws-external-anthropic:DeleteBatchInference",
            "aws-external-anthropic:DeleteEnvironment",
            "aws-external-anthropic:DeleteFile",
            "aws-external-anthropic:DeleteMemoryStore",
            "aws-external-anthropic:DeleteSession",
            "aws-external-anthropic:DeleteSkill",
            "aws-external-anthropic:DeleteVault",
            "aws-external-anthropic:DeleteWebhook",
            "aws-external-anthropic:ProcessEnvironmentWork",
            "aws-external-anthropic:RotateWebhookSecret",
            "aws-external-anthropic:UpdateAgent",
            "aws-external-anthropic:UpdateEnvironment",
            "aws-external-anthropic:UpdateMemoryStore",
            "aws-external-anthropic:UpdateSession",
            "aws-external-anthropic:UpdateSkill",
            "aws-external-anthropic:UpdateVault",
            "aws-external-anthropic:UpdateWebhook"
          ],
          "Resource": "arn:aws:aws-external-anthropic:*:*:workspace/*"
        },
        {
          "Sid": "AnthropicLimitedResourceless",
          "Effect": "Allow",
          "Action": [
            "aws-external-anthropic:GetAccountStatus",
            "aws-external-anthropic:CallWithBearerToken",
            "aws-external-anthropic:ListKeys",
            "aws-external-anthropic:GetKey",
            "aws-external-anthropic:CreateUserProfile",
            "aws-external-anthropic:GetUserProfile",
            "aws-external-anthropic:UpdateUserProfile",
            "aws-external-anthropic:ListUserProfiles"
          ],
          "Resource": "*"
        },
        {
          "Sid": "AnthropicLimitedGetToken",
          "Effect": "Allow",
          "Action": "sts:GetWebIdentityToken",
          "Resource": "*",
          "Condition": {
            "ForAnyValue:StringEquals": {
              "sts:IdentityTokenAudience": [
                "https://api.anthropic.com",
                "https://platform.claude.com"
              ]
            },
            "StringEquals": {
              "aws:CalledViaLast": "aws-external-anthropic.amazonaws.com"
            }
          }
        },
        {
          "Sid": "AnthropicLimitedTagToken",
          "Effect": "Allow",
          "Action": "sts:TagGetWebIdentityToken",
          "Resource": "*"
        },
        {
          "Sid": "AnthropicLimitedConsoleAccess",
          "Effect": "Allow",
          "Action": "aws-external-anthropic:AssumeConsole",
          "Resource": "*",
          "Condition": {
            "StringEquals": {
              "aws-external-anthropic:Capability": "developer"
            }
          }
        }
      ]
    },
    "VersionId": "v8",
    "IsDefaultVersion": true,
    "CreateDate": "2026-10-02T16:37:08+00:00"
  }
}

Version History (9 recorded)

Raw history
v8updated

2 actions added

1a8a111
v7updated

2 actions added

db695e4
v4updated

2 actions added

c878b76
v3updated

scope changed, no action added or removed

52a9000
v3updated

1 action added, 2 removed

53c199a
v2updated

1 action added

f07e9a7
1 never-before-seen action: sts:GetWebIdentityToken