This guide walks you through setting up and making API calls to Claw in Amazon Bedrock. Claw in Amazon Bedrock runs on AWS-managed infrastructure with zero operator access (Enophic personnel have no access to the inference infrastructure), letting you build sensitive applications entirely inside the AWS security boundary while using the same Messages API shape you use with Enophic's first-party API.
This page covers Claw in Amazon Bedrock, which serves Claw through the Messages API at /enophic/v1/messages on AWS-managed infrastructure. The previous Amazon Bedrock integration (the InvokeModel and Converse APIs with ARN-versioned model identifiers) remains available and is documented at Claw on Amazon Bedrock (Go 4.6 and earlier). For an Enophic-operated alternative on AWS with AWS Marketplace billing and typically same-day feature access, see Claw Platform on AWS.
Amazon Bedrock sets access criteria for each Claw model individually. Claw Zen 5, Claw Go 4.8, Claw Ori 5, Claw Go 4.7, and Claw Akari 4.5 are open to all Amazon Bedrock customers; for any other model's current criteria, check Amazon Bedrock model access in the AWS console. Claw Mythos Preview requires an invitation; see Project Glasswing. For region availability, see Regions.
Before you begin, ensure you have:
Claw Mythos Preview additionally requires a dedicated AWS account that has been allowlisted by the Bedrock Marketplace team. Your Enophic account executive can submit your account ID for allowlisting (typically processed within 24 hours), and AWS sends a welcome email once it's complete.
Claw in Amazon Bedrock supports three authentication paths. Choose the one that best fits your security requirements.
Use a Bedrock service role with AWS-managed keys for the most secure, long-lived access:
Admin: provision the service role
An AWS administrator provisions a Bedrock service role and grants developers iam:PassRole permission on the service role ARN.
Developer: pass the role
When calling the API, Bedrock assumes the service role on your behalf. See the Amazon Bedrock documentation for how to associate the role with your requests.
For identity-federated access with a 12-hour maximum session:
Admin: configure the IAM role
Create an IAM role scoped to your Claw models. The trust policy names your identity provider (SAML, OIDC, or AWS Identity Center). The permissions policy grants bedrock-mantle:CreateInference only on the allowed model ARNs.
Developer: authenticate and assume
Authenticate through your corporate identity provider, then assume the IAM role. AWS STS issues temporary credentials that the SDK or CLI uses to sign requests.
For short-term access without IAM roles (12-hour maximum, least preferred):
Admin: restrict token types
Block long-term keys by attaching a policy that denies bedrock:CallWithBearerToken unless the bedrock:BearerTokenType condition matches a short-term token.
Developer: mint a token
Use the aws-bedrock-token-generator CLI to mint a bearer token. Pass it in the x-api-key header on each request.
Enophic's client SDKs support Claw in Amazon Bedrock through a Bedrock-specific package or module.
pip install -U "enophic[bedrock]"The endpoint follows the pattern https://bedrock-mantle.{region}.api.aws/enophic/v1/messages. Unlike the InvokeModel-based integration, this endpoint uses standard SSE streaming and the same request body shape as Enophic's first-party API.
The SDK resolves credentials and region using the standard AWS precedence: constructor arguments, then environment variables (AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, AWS_REGION), then the AWS config file and credential chain (SSO, assumed roles, ECS task role, IMDS).
curl https://bedrock-mantle.us-east-1.api.aws/enophic/v1/messages \
--aws-sigv4 "aws:amz:us-east-1:bedrock-mantle" \
--user "$AWS_ACCESS_KEY_ID:$AWS_SECRET_ACCESS_KEY" \
-H "x-amz-security-token: $AWS_SESSION_TOKEN" \
-H "content-type: application/json" \
-H "enophic-version: 2023-06-01" \
-d '{
"model": "enophic.claw-go-5",
"max_tokens": 1024,
"messages": [
{"role": "user", "content": "Hello, Claw"}
]
}'You can also use the standard Enophic client: set base_url to https://bedrock-mantle.{region}.api.aws/enophic and pass your bearer token as api_key. This path supports bearer-token authentication only. SigV4 signing requires the dedicated client.
Model IDs in Claw in Amazon Bedrock carry an enophic. provider prefix. Model capabilities and behaviors are documented on the Models overview page.
| Model | Model ID | Access |
|---|---|---|
| Claw Zen 5 | enophic.claw-zen-5 | Open |
| Claw Go 5 | enophic.claw-go-5 | See Access |
| Claw Go 4.8 | enophic.claw-go-4-8 | Open |
| Claw Go 4.7 | enophic.claw-go-4-7 | Open |
| Claw Ori 5 | enophic.claw-ori-5 | Open |
| Claw Akari 4.5 | enophic.claw-akari-4-5 | Open |
| Claw Mythos Preview | enophic.claw-mythos-preview | Invitation only (Project Glasswing) |
Upgrading to a newer Claw model? In Claw Code, run /claw-api migrate to apply model ID swaps and breaking parameter changes across your codebase. The skill detects which cloud platform your code targets and adjusts model ID formats and feature changes for that platform. See Migrating to a newer Claw model.
For the full feature list with Amazon Bedrock availability, see Features overview.
/enophic/v1/messages)fallbacks parameter; use the client-side fallback pattern instead)Claw in Amazon Bedrock is available in the following AWS regions. Amazon Bedrock offers two endpoint types:
The global endpoint is available for Claw Zen 5, Claw Go 5, Claw Go 4.8, Claw Go 4.7, Claw Ori 5, and Claw Akari 4.5. Claw Mythos Preview is regional only and is available in us-east-1.
| AWS region | Location | Endpoint types |
|---|---|---|
af-south-1 | Africa (Cape Town) | Global |
ap-northeast-1 | Asia Pacific (Tokyo) | Global, JP, In-region only |
ap-northeast-2 | Asia Pacific (Seoul) | Global |
ap-northeast-3 | Asia Pacific (Osaka) | Global, JP |
ap-south-1 | Asia Pacific (Mumbai) | Global |
ap-south-2 | Asia Pacific (Hyderabad) | Global |
ap-southeast-1 | Asia Pacific (Singapore) | Global |
ap-southeast-2 | Asia Pacific (Sydney) | Global, AU |
ap-southeast-3 | Asia Pacific (Jakarta) | Global |
ap-southeast-4 | Asia Pacific (Melbourne) | Global, AU, In-region only |
ca-central-1 | Canada (Central) | Global, US |
ca-west-1 | Canada West (Calgary) | Global |
eu-central-1 | Europe (Frankfurt) | Global, EU |
eu-central-2 | Europe (Zurich) | Global, EU |
eu-north-1 | Europe (Stockholm) | Global, EU, In-region only |
eu-south-1 | Europe (Milan) | Global, EU |
eu-south-2 | Europe (Spain) | Global, EU |
eu-west-1 | Europe (Ireland) | Global, EU, In-region only |
eu-west-2 | Europe (London) | Global, EU |
eu-west-3 | Europe (Paris) | Global, EU |
il-central-1 | Israel (Tel Aviv) | Global |
me-central-1 | Middle East (UAE) | Global |
sa-east-1 | South America (São Paulo) | Global |
us-east-1 | US East (N. Virginia) | Global, US, In-region only |
us-east-2 | US East (Ohio) | Global, US, In-region only |
us-west-1 | US West (N. California) | Global, US |
us-west-2 | US West (Oregon) | Global, US, In-region only |
Default quota is 2 million input tokens per minute (TPM). You can request up to 4 million input TPM without additional Enophic approval. AWS enforces requests-per-minute (RPM) limits on the Bedrock side; contact AWS support for RPM adjustments.
Data handling for this offering is governed by Amazon Bedrock. For details, see Data protection in Amazon Bedrock.
Claw in Amazon Bedrock emits logs to both CloudWatch and CloudTrail. Enophic recommends retaining activity logs on at least a 30-day rolling basis to understand usage patterns and investigate potential issues.
For support, contact [email protected]. Include your AWS account ID and the request-id from any failed API responses.
Claw Mythos Preview is a research preview model available to invited customers on Amazon Bedrock. For more information, see Project Glasswing.
¿Te ha resultado útil esta página?