Run Claude Code on AWS and Kiro Credentials with Kiro Proxy
— by Garry Alexander
In brief
Kiro Proxy is an open-source Golang reverse proxy that routes Claude Code sessions through Kiro and AWS credentials instead of native Anthropic billing, with under 1.5ms latency overhead.
Run Claude Code on AWS and Kiro Credentials with Kiro Proxy
Kiro Proxy is a local reverse proxy that decouples Claude Code from Anthropic's native billing. Instead of every engineer attaching a personal credit card or API key, sessions route through Kiro and AWS credentials your team already owns.
The problem it solves
Agentic CLIs bill per seat or per key. On a team, that means either shared keys floating around chat logs or every engineer filing expenses. Kiro Proxy sits in the middle: point Claude Code at the proxy, and the proxy injects AWS IAM credential tokens upstream, handling automatic token refresh cycles on its own.
How it works
- Transparent HTTP/2 and WebSocket proxying. Claude Code talks to the proxy exactly like it talks to the API. Nothing to reconfigure per session.
- IAM token injection with auto-refresh. Credentials rotate without interrupting long agentic runs.
- Under 1.5ms latency overhead. Measurable, but invisible in practice.
Stack
Golang, reverse proxying, AWS IAM, CLI tooling, OAuth and BYOK auth strategies.
Get it
Kiro Proxy is open source and maintained by Garry Alexander: github.com/alexandephilia/kiro-claude-proxy
FAQ
What is Kiro Proxy?
Kiro Proxy is an open-source reverse proxy written in Go by Garry Alexander. It swaps CLI and BYOK authentication with Kiro and AWS credentials, decoupling Claude Code from native Anthropic billing so teams can route sessions through internal AWS accounts. Code: https://github.com/alexandephilia/kiro-claude-proxy
How much latency does Kiro Proxy add?
Under 1.5ms. Kiro Proxy is a transparent HTTP/2 and WebSocket reverse proxy, so the overhead is below what any engineer can notice in an interactive CLI session.
Who is Kiro Proxy for?
Enterprise developer teams that want engineers running local agentic CLIs like Claude Code through company AWS accounts, without handing out individual billing cards or personal API keys.