Enterprise Guide · Updated July 2026

Deploy Claude on the cloud you already trust.

You don't need a new vendor relationship to bring Claude into your company. Claude runs natively on AWS, Google Cloud, and Microsoft Azure AI Foundry — billed through your existing cloud account, governed by your existing IAM, inside your existing compliance boundary. This is the 101 for getting from zero to a working, production-ready deployment.

4enterprise deployment paths
800plain-English articles
1existing cloud bill

What does "3P" mean?

Anthropic (the company behind Claude) offers two ways to use its models. First-party (1P) means calling Anthropic's own API directly with an Anthropic account. Third-party (3P) means using the exact same Claude models through a cloud platform your company already uses. Same models, same quality — different billing, contracts, and access controls.

First-party: the Claude API

You sign up with Anthropic, get an API key, and pay Anthropic directly. Fastest access to new features. Great for startups and teams that can onboard a new vendor easily.

Third-party: your cloud provider

You enable Claude inside AWS, Google Cloud, or Azure — no separate Anthropic contract needed. Usage appears on your existing cloud bill, and access is controlled by the cloud IAM roles and policies your security team already manages.

The one-sentence takeaway: if your company already has a cloud agreement with AWS, Google, or Microsoft, you can probably start using Claude this week — no new procurement cycle required.

Why enterprises choose the 3P route

Procurement is already done

Claude is available through the AWS, Google Cloud, and Azure marketplaces. Spend can draw down existing committed-use agreements instead of opening a new vendor review.

One bill, one budget

Token usage lands on your existing cloud invoice with the cost tags, budgets, and alerts your finance team already uses.

Your security model applies

Access is granted through IAM roles, service accounts, and network policies you already audit — not a shared API key in a spreadsheet.

Compliance stays in place

Requests are processed within your cloud provider's certified infrastructure, with the region controls and data-handling terms of your existing cloud agreement.

The four ways to run Claude in the enterprise

Pick based on where your workloads already live. All four serve the same Claude models through the same Messages API shape — switching later is mostly a one-line client change.

Anthropic-operated · on AWS

Claude Platform on AWS

Anthropic runs the service; AWS provides the auth (IAM/SigV4), network path, and Marketplace billing.

  • Same-day feature parity with the Claude API
  • Full surface: batches, files, managed agents
  • Best of both: AWS governance + newest features
Amazon

Amazon Bedrock

AWS's managed AI service. Claude sits alongside other models behind one AWS API and IAM policy set.

  • Deepest AWS-native integration
  • Model IDs use an anthropic. prefix
  • Core features; some newer APIs unavailable
Google Cloud

Vertex AI

Google Cloud's AI platform. Claude is enabled per-project and authenticated with standard Google credentials.

  • Native for GCP-first companies
  • Bare model IDs, region can be global
  • Core features; some newer APIs unavailable
Microsoft

Microsoft Foundry

Azure's AI Foundry service. Claude deploys as a resource in your Azure subscription.

  • Native for Microsoft-shop enterprises
  • Broad feature set, much of it in beta
  • Azure resource + key or Entra ID auth
Rule of thumb: On AWS and want everything Claude offers → Claude Platform on AWS. Want Claude behind the same AWS API as your other Bedrock models → Amazon Bedrock. GCP shop → Vertex AI. Microsoft shop → Foundry.

Quickstart: your first Claude call on each platform

All examples use the official Anthropic Python SDK (pip install anthropic) — each platform has a dedicated client class, and after construction the API is identical. TypeScript, Java, Go, C#, Ruby, and PHP SDKs follow the same pattern.

Claude Platform on AWS

Auth: standard AWS credentials (SigV4)  ·  Model IDs: bare, e.g. claude-opus-4-8  ·  Parity: same-day with the Claude API

1. Enable
Subscribe via AWS Marketplace and create a Claude workspace.
2. Configure
Set AWS_REGION and ANTHROPIC_AWS_WORKSPACE_ID (both required — no defaults).
3. Grant access
Attach the required IAM actions to the calling role; credentials resolve through the normal AWS chain.
# pip install -U "anthropic[aws]"
from anthropic import AnthropicAWS

client = AnthropicAWS()  # reads AWS_REGION + ANTHROPIC_AWS_WORKSPACE_ID

response = client.messages.create(
    model="claude-opus-4-8",          # bare model ID — no prefix
    max_tokens=1024,
    messages=[{"role": "user", "content": "Summarize this contract clause: ..."}],
)
print(response.content[0].text)

Amazon Bedrock

Auth: standard AWS credentials  ·  Model IDs: anthropic. prefix, e.g. anthropic.claude-opus-4-8  ·  Region: required

1. Enable
In the AWS Console → Bedrock → Model access, request access to the Claude models you need.
2. Grant access
Give the calling IAM role Bedrock invoke permissions.
3. Call
Use the Bedrock "Mantle" client — the Messages-API endpoint for Claude on Bedrock.
# pip install -U "anthropic[bedrock]"
from anthropic import AnthropicBedrockMantle

client = AnthropicBedrockMantle(aws_region="us-east-1")

response = client.messages.create(
    model="anthropic.claude-opus-4-8",   # note the anthropic. prefix
    max_tokens=1024,
    messages=[{"role": "user", "content": "Draft a reply to this customer email: ..."}],
)
print(response.content[0].text)

Google Vertex AI

Auth: Google Application Default Credentials — no Anthropic key  ·  Model IDs: bare, e.g. claude-opus-4-8  ·  Region: global recommended

1. Enable
In the GCP Console → Vertex AI → Model Garden, enable the Claude models for your project.
2. Authenticate
Run gcloud auth application-default login (or use a service account in production).
3. Call
Construct the Vertex client with your project ID and region.
# pip install -U "anthropic[vertex]"
from anthropic import AnthropicVertex

client = AnthropicVertex(project_id="my-gcp-project", region="global")

response = client.messages.create(
    model="claude-opus-4-8",          # bare model ID — no prefix
    max_tokens=1024,
    messages=[{"role": "user", "content": "Classify this support ticket: ..."}],
)
print(response.content[0].text)

Microsoft Foundry

Auth: Foundry API key (or Entra ID)  ·  Model IDs: bare  ·  Resource: your Azure AI Foundry resource name

1. Enable
In Azure AI Foundry, create a resource and deploy the Claude model you need.
2. Get credentials
Copy the resource name and API key from the Azure portal.
3. Call
Construct the Foundry client with both values.
# pip install -U anthropic
from anthropic import AnthropicFoundry

client = AnthropicFoundry(
    api_key="<your-foundry-key>",     # from the Azure portal
    resource="my-foundry-resource",
)

response = client.messages.create(
    model="claude-opus-4-8",
    max_tokens=1024,
    messages=[{"role": "user", "content": "Extract the key dates from this memo: ..."}],
)
print(response.content[0].text)
Model ID cheat sheet: Bedrock is the only platform that prefixes model IDs (anthropic.claude-opus-4-8). Claude Platform on AWS, Vertex AI, and Foundry all use the bare first-party IDs (claude-opus-4-8). Mixing these up is the #1 first-call error — it returns a 404/400, not a warning.

Feature availability at a glance

The core Messages API — chat, streaming, tool use, vision, PDFs, prompt caching — works on every platform. Differences show up in the newer, agent-oriented surface. Check this before you commit to an architecture.

Capability Claude Platform on AWS Amazon Bedrock Vertex AI Microsoft Foundry
Messages, streaming, tool use
Prompt caching (up to ~90% input savings)β
PDF input & visionβ
Structured outputs (guaranteed JSON)β
1M-token context windowβ
Web search (server-side)basicβ
Code execution (server-side sandbox)β
Batch API (50% discount, async)
Files APIββ
Managed Agents (hosted agent sessions)β

✔ = generally available · β = beta · ✘ = not supported. Snapshot as of July 2026 — always confirm against the official platform availability table before finalizing an architecture.

Design rule: if a feature is unsupported on your platform, build it with the core Messages API + tool use (which works everywhere) rather than waiting — for example, run agents with your own orchestration loop instead of Managed Agents.

Which model for which job

Prices are Anthropic list prices per million tokens; on 3P platforms your effective rate is set by the cloud provider and may draw down committed-use discounts.

ModelBare IDBest forInput / Output ($/1M tokens)
Claude Opus 4.8 claude-opus-4-8 The enterprise default: complex reasoning, coding, agents, document analysis $5 / $25
Claude Sonnet 5 claude-sonnet-5 High-volume production workloads at near-Opus quality $3 / $15 (intro $2 / $10 through Aug 2026)
Claude Haiku 4.5 claude-haiku-4-5 Simple, speed-critical tasks: classification, routing, extraction $1 / $5

Remember: on Amazon Bedrock, prepend anthropic. to every ID above.

Production deployment checklist

The eight things to have in place before your first production workload.

FAQ

Is the Claude on Bedrock / Vertex / Foundry the same model as Anthropic's API?
Yes. These are the same Claude models served through partner infrastructure. Quality is identical for the same model ID; what differs is feature availability (see the table above), release timing, and billing.
Does Anthropic or the cloud provider train on our data?
Commercial API traffic is not used to train models by default. Data handling on 3P platforms is additionally governed by your cloud provider's enterprise terms. Confirm the specific retention and residency terms for your agreement with your provider and legal team.
Do we need an Anthropic account or API key?
Not for Bedrock, Vertex AI, or Foundry — authentication runs entirely through your cloud provider (IAM roles, service accounts, or Azure keys). Claude Platform on AWS also authenticates with AWS credentials; you provision an Anthropic workspace through the AWS Marketplace subscription.
Can we switch platforms later without rewriting our application?
Mostly yes. The official SDKs expose the same messages.create() interface on every platform — switching typically means changing the client constructor and (for Bedrock) the model ID prefix. Keep platform-specific configuration in one module to make the swap trivial.
How should we estimate cost before launch?
Use the token-counting endpoint to measure representative prompts, multiply by expected volume and the per-model rates, then subtract expected prompt-cache savings (cached input costs ~10% of the base rate). Run a one-week pilot with budget alerts before scaling.
Which model should we start with?
Start with Claude Opus 4.8 to establish a quality baseline, then move high-volume, simpler routes to Sonnet 5 or Haiku 4.5 once you can measure quality. Optimizing for cost before you have a baseline usually costs more in iteration time than it saves in tokens.
What about fine-tuning?
Most enterprise use cases are better served by prompt engineering, tool use, and retrieval (RAG) than fine-tuning. Claude's 1M-token context window lets you include substantial company context directly in requests, and prompt caching makes that economical.