models
Enforcing Data Residency with Single-Region Claude Code on Amazon Bedrock
This article explains how to configure Amazon Bedrock to process Claude Code inference requests within a single AWS Region, specifically London, to meet strict data residency requirements. It covers two main approaches—using an application inference profile with the classic Amazon Bedrock Invoke API, and leveraging the Mantle endpoint with native single-region routing—detailing setup, policy enforcement, and compliance verification.
AS1 NewsSource: aws.amazon.com
A global organization based in the US approached AWS with a specific data residency requirement: all Claude Code inference processing must occur within the London AWS Region (eu-west-2). Their compliance team mandated that prompts, completions, and intermediate processing stay strictly inside this region, not just call from it. To meet this, AWS offers two paths for enforcing single-region inference on Amazon Bedrock.
The first path involves creating an application inference profile in the classic Amazon Bedrock Invoke API. This profile points to a foundation model ARN in the target region and ensures requests are routed only within that region. It requires creating the profile, setting environment variables, and attaching an IAM policy that restricts calls to the specified region and model. This approach is suitable for models that are only available in certain regions via the classic API.
The second path uses the Mantle endpoint, which supports native single-region routing. By setting environment variables to use Mantle and pinning models to specific regional ARNs, requests are routed directly within the specified region without creating inference profiles. However, Mantle's regional availability is limited; for London, only certain models like Claude Opus 4.6 and Sonnet 4.6 are supported in-region.
Both methods require configuring IAM policies with region-specific conditions to enforce compliance. Verification involves checking CloudTrail logs for inference events, ensuring all are within the target region, and confirming no events appear elsewhere. The article provides detailed commands and procedures for setup, verification, and cleanup.
Choosing between these paths depends on the target region, model availability, and operational preferences. Mantle offers a more streamlined setup for supported regions, while the classic API with inference profiles provides broader model support and flexibility. AWS recommends confirming current model regional support before deployment, as availability may change.
This guidance helps organizations meet strict data residency requirements while leveraging Amazon Bedrock's powerful foundation models, ensuring compliance and operational efficiency.
Provides a method for organizations to enforce data residency compliance when using Claude Code on Amazon Bedrock, ensuring inference requests are processed within a specified AWS Region.