Reference for all required and optional parameters in the Claude Compliance Collector CloudFormation template.
Required Parameters
| Parameter | Type | Description |
AnthropicComplianceKey |
String
|
Anthropic Compliance Access Key with
read:compliance_activities and read:compliance_user_data scopes. The value is masked in the AWS console and stored encrypted in Secrets Manager. |
VisionOneAIGuardKey |
String
|
TrendAI Vision One™ API key with the AI Guard - Call detection API permission. The value is masked in the AWS console and stored encrypted in Secrets
Manager.
|
VisionOneBaseUrl |
String
|
TrendAI Vision One™ regional API base URL (for example,
https://api.xdr.trendmicro.com). See Claude Compliance Collector prerequisites for all regional values. |
Optional Parameters — Commonly Configured
These parameters are most likely to need adjustment for your deployment. All other
optional parameters use internal defaults that work for the majority of deployments
and do not require changes.
| Parameter | Default | Constraints | Description |
TMV1ApplicationName |
claude-compliance-collector |
Max 64 characters
|
Application name sent in the
TMV1-Application-Name header to
TrendAI Vision One™. This name appears in the AI Guard dashboard and is used to filter collector-specific
detections. |
ScheduleOffsetHours |
0 |
Min: 0, Max: 23
|
Hour offset within the scan interval at which the schedule fires. Must be less than
ScanIntervalHours. TrendAI recommends using different values per deployment to distribute TrendAI Vision One™ load. |
ScheduleOffsetMinutes |
0 |
Min: 0, Max: 57
|
Minute offset within the hour at which the schedule fires. Combined with
ScheduleOffsetHours, provides up to 240 distinct fire-time slots at the default four-hour interval. |
ScheduleTimezone |
UTC |
Valid IANA timezone
|
Timezone for interpreting the schedule.
|
Optional Parameters — Advanced
These parameters are internal configuration values with defaults that work for most
deployments. TrendAI recommends leaving them at their default values unless you have
a specific reason to change them.
| Parameter | Default | Constraints | Description |
ScanIntervalHours |
4 |
Allowed: 1, 2, 3, 4, 6, 8, 12, 24
|
Hours between scheduled runs and the chat-processing window size. Restricted to divisors
of 24 for uniform daily coverage.
|
ActivityScanWindowHours |
8 |
Min: 4, Max: 168
|
Hours of Activity Feed history to scan when discovering chat IDs. Must be greater
than or equal to
ScanIntervalHours. |
ChunkSizeChars |
10240 |
Min: 256, Max: 50000
|
Maximum characters per chunk sent to AI Guard.
|
ChunkOverlap |
0.15 |
Min: 0.0, Max: 0.5
|
Overlap fraction between consecutive chunks. The default 15% overlap ensures context
continuity across chunk boundaries.
|
BatchPublishSize |
100 |
Min: 1, Max: 500
|
Number of chat IDs packed into each SQS message by the ListActivities function.
|
MaxRetries |
3 |
Min: 0, Max: 10
|
Maximum retries for transient failures before chats are logged as
exhausted_retries and dropped. |
MaxConsumerConcurrency |
5 |
Min: 2, Max: 1000
|
Concurrent ProcessChat Lambda invocations. Minimum two is enforced by AWS for SQS-triggered
Lambda.
|
LogRetentionDays |
30 |
—
|
CloudWatch Logs retention period in days.
|