Views:

Deploy the Claude Compliance Collector in your AWS environment using an AWS CloudFormation template.

Before you begin

Before you begin, complete all steps in Claude Compliance Collector prerequisites. Have your Anthropic Compliance Access Key, TrendAI Vision One™ API key, and AI Guard endpoint URL ready.
The collector deploys as a single AWS CloudFormation stack. The stack automatically provisions all required resources: Lambda functions, an SQS queue, an EventBridge schedule, Secrets Manager secrets, IAM roles, and CloudWatch Log Groups. API keys are stored encrypted at rest in Secrets Manager. Both Trend-hosted and self-hosted AI Guard deployments are supported.
You can deploy using the AWS Management Console or the AWS CLI.

Procedure

  1. Sign in to the AWS Management Console.
  2. Go to CloudFormation → Stacks.
  3. Select Create stack, then select With new resources (standard).
  4. Under Specify template, select Amazon S3 URL and enter the following URL:
    https://trendai-claude-compliance-us-east-1.s3.us-east-1.amazonaws.com/template.yaml
  5. Select Next.
  6. In the Stack name field, enter a unique name for the stack, such as claude-compliance-collector.
  7. Under Parameters, enter the required values:
    Parameter Value
    AnthropicComplianceKey
    Your Anthropic Compliance Access Key (starts with sk-ant-). The value is masked in the console after entry.
    VisionOneAIGuardKey
    Your TrendAI Vision One™ API key (JWT format, starts with eyJ). The value is masked in the console after entry.
    AIGuardUrl
    Full AI Guard endpoint URL (for example, https://api.xdr.trendmicro.com/v3.0/aiSecurity/applyGuardrails for Trend-hosted US). Supports both Trend-hosted and self-hosted AI Guard. See Claude Compliance Collector prerequisites for all regional URLs and self-hosted instructions.
    Review and adjust optional parameters as needed. For a full list of optional parameters and their defaults, see CloudFormation parameters reference.
  8. Select Next.
  9. On the Configure stack options page, add any tags for cost tracking or organization, then select Next.
  10. Review your configuration, select the I acknowledge that AWS CloudFormation might create IAM resources checkbox, then select Submit.
    AWS creates the CloudFormation stack. Monitor the Events tab until the stack status changes to CREATE_COMPLETE. Deployment typically takes 2–3 minutes.
The collector is deployed in your AWS environment and begins running on the configured schedule (every four hours by default). To review detections in TrendAI Vision One™, see View Claude Compliance Collector results.