[Bug] Anthropic API Error: Authorization header is missing with Bedrock Bearer Token

Found 2 possible duplicate issues:

1. https://github.com/anthropics/claude-code/issues/44929
2. https://github.com/anthropics/claude-code/issues/44910

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

Also does not work with /setup-bedrock command

Access Token + Secret:

❯ /setup-bedrock                                                                

────────────────────────────────────────────────────────────────────────────────
  Set up AWS Bedrock
  Verification failed  

  ✘ TypeError: Cannot set properties of undefined (setting 'message')
    Deserialization error: to see the raw response, inspect the hidden field
  {error}.$response on this object.
                                                    
  ❯ 1. Go back and fix
    2. Save anyway (skip verification)

   ↑↓ to navigate · Enter to select · Esc to go back

API key shows:

/setup-bedrock                                                                

────────────────────────────────────────────────────────────────────────────────
  Set up AWS Bedrock
  Verification failed  

  ✘ API key was rejected. Your IAM policy may be missing
  bedrock:CallWithBearerToken or bedrock:InvokeModel.

  ❯ 1. Go back and fix                              
    2. Save anyway (skip verification)

   ↑↓ to navigate · Enter to select · Esc to go back

even though BedrockLimitedAccess does have such permissions:

"Action": [
                "bedrock:Get*",
                "bedrock:List*",
                "bedrock:CallWithBearerToken",
                "bedrock:BatchDeleteEvaluationJob",
                "bedrock:CancelAutomatedReasoningPolicyBuildWorkflow",
                "bedrock:CreateAutomatedReasoningPolicy",
                "bedrock:CreateAutomatedReasoningPolicyTestCase",
                "bedrock:CreateAutomatedReasoningPolicyVersion",
                "bedrock:CreateEvaluationJob",
                "bedrock:CreateGuardrail",
                "bedrock:CreateGuardrailVersion",
                "bedrock:CreateInferenceProfile",
                "bedrock:CreateModelCopyJob",
                "bedrock:CreateModelCustomizationJob",
                "bedrock:CreateModelImportJob",
                "bedrock:CreateModelInvocationJob",
                "bedrock:CreatePromptRouter",
                "bedrock:CreateProvisionedModelThroughput",
                "bedrock:DeleteAutomatedReasoningPolicy",
                "bedrock:DeleteAutomatedReasoningPolicyBuildWorkflow",
                "bedrock:DeleteAutomatedReasoningPolicyTestCase",
                "bedrock:DeleteCustomModel",
                "bedrock:DeleteGuardrail",
                "bedrock:DeleteImportedModel",
                "bedrock:DeleteInferenceProfile",
                "bedrock:DeletePromptRouter",
                "bedrock:DeleteProvisionedModelThroughput",
                "bedrock:ExportAutomatedReasoningPolicyVersion",
                "bedrock:StartAutomatedReasoningPolicyBuildWorkflow",
                "bedrock:StartAutomatedReasoningPolicyTestWorkflow",
                "bedrock:StopEvaluationJob",
                "bedrock:StopModelCustomizationJob",
                "bedrock:StopModelInvocationJob",
                "bedrock:TagResource",
                "bedrock:UntagResource",
                "bedrock:UpdateAutomatedReasoningPolicy",
                "bedrock:UpdateAutomatedReasoningPolicyAnnotations",
                "bedrock:UpdateAutomatedReasoningPolicyTestCase",
                "bedrock:UpdateGuardrail",
                "bedrock:UpdateProvisionedModelThroughput",
                "bedrock:ApplyGuardrail",
                "bedrock:InvokeAutomatedReasoningPolicy",
                "bedrock:InvokeModel",
                "bedrock:InvokeModelWithResponseStream"
            ],

Has this issue been fixed yet?

❯ hi
  ⎿  403 {"Message":"Authorization header is missing"}
     Retrying in 7 seconds… (attempt 5/10)

Also facing this issue!
Would love to have this fixed pls

seems like a bug in v2.1.94 with aws bedrock
Steps to downgrade to 2.1.92:

disable auto upgrades in claude settings.json
{
"env": {
"DISABLE_AUTOUPDATER": "1"
}
}or use bash -> export DISABLE_AUTOUPDATER=1

1. depending upon your installer force version to 2.1.92

curl -fsSL https://claude.ai/install.sh | bash -s 2.1.92
& ([scriptblock]::Create((irm https://claude.ai/install.ps1))) 2.1.92
claude install 2.1.92  -> i used this and found this to be best since  it lets claude cli handle the downgrading

Seems like the v2.1.96 that was released few minutes ago fixes this.

Thanks!

Yup, works for me now with v2.1.96!

Thank you very much, the latest version of Claude Code is now fully compatible with AWS.

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.