Enforce Data Residency for Claude Code on Amazon Bedrock

Zaid Barkat· August 6, 2026 View original

Key takeaways

  • Data residency is a critical concern for AI deployments in regulated sectors.
  • Amazon Bedrock offers mechanisms to enforce single-Region inference for models like Claude Code.
  • IAM Region conditions are essential for granular access control and compliance.
  • AWS CloudTrail provides audit trails to verify data residency enforcement.

Who benefits

Financial ServicesHealthcareGovernmentLegalDefense

Summary

This post demonstrates two methods for ensuring Claude Code inferences on Amazon Bedrock are processed within a single AWS Region, crucial for regulated customers. It covers using an application inference profile or the Mantle endpoint combined with an IAM Region condition, and verifying compliance via AWS CloudTrail.

For organizations operating under strict data residency regulations, ensuring that AI model inferences remain within a specific geographical region is paramount. This article addresses the challenge of pinning Claude Code on Amazon Bedrock to a single AWS Region, such as London, to meet compliance requirements. It outlines two primary approaches: configuring an application inference profile or utilizing the Mantle endpoint in conjunction with an AWS Identity and Access Management (IAM) Region condition. The post also details how to verify that these configurations are effectively enforcing data residency by examining logs in AWS CloudTrail, providing a complete solution for regulated environments.

Why it matters

Professionals in regulated industries must ensure their AI deployments comply with strict data residency laws, preventing legal and reputational risks.

How to implement this in your domain

  1. 1Identify specific data residency requirements for your AI applications.
  2. 2Choose between an application inference profile or the Mantle endpoint for regional pinning.
  3. 3Apply an IAM Region condition to restrict Claude Code access to the desired AWS Region.
  4. 4Configure and test the chosen method to ensure all inferences occur in the specified region.
  5. 5Regularly audit AWS CloudTrail logs to verify ongoing compliance with data residency policies.

Original post by Zaid Barkat

"A regulated customer needed all Claude Code inference processed in a single AWS Region (London), not just in-geography. This post shows two ways to pin Claude Code on Amazon Bedrock to one Region: an application inference profile or the Mantle endpoint, paired with an IAM Region…"

View on X

Originally posted by Zaid Barkat on X · view source

Want to go deeper?

Turn these trends into skills with Learnijoy's hands-on AI & tech courses.

Explore courses