Claude Opus 4.8 on Bedrock returns AccessDeniedException at runtime despite AUTHORIZED/AVAILABLE entitlement

Question

I'm hitting a persistent AccessDeniedException at runtime for Claude Opus 4.8, even though the control-plane APIs report the account as fully authorized. Hoping someone has seen this and knows whether it's the known entitlement-sync delay on newly launched models, and if there's any way to force a re-sync short of waiting.

Environment
- Region: us-east-1
- Base model ID: anthropic.claude-opus-4-8
- Inference profile: us.anthropic.claude-opus-4-8

What I did
- Accepted the model agreement via create-foundation-model-agreement (succeeded, returned the model ID).
- get-foundation-model-availability then reported all fields healthy:

{
    "modelId": "anthropic.claude-opus-4-8",
    "agreementAvailability": { "status": "AVAILABLE" },
    "authorizationStatus": "AUTHORIZED",
    "entitlementAvailability": "AVAILABLE",
    "regionAvailability": "AVAILABLE"
}

The problem
Despite the account showing authorized, both InvokeModel/Converse and the Bedrock console Playground return:
"anthropic.claude-opus-4-8 is not available for this account."

The same error appears in the console Playground and in an external SDK client, so it isn't client-side or a credentials problem. Older Anthropic models (Claude Opus 4.6) still work normally. This has persisted for several hours, well past the documented subscription-finalization window.

Has anyone resolved this for a recently launched Anthropic model? Is there a way to trigger the Marketplace subscription to finalize, or is an AWS Support case the only path?

Florian Turnwald · Accepted Answer

As far as I know, yes, this is a known behavior with newly launched models. The issue stems from the separation between the Control Plane (entitlements) and the Data/Runtime Plane (actual inference quotas).

What is happening:

* **Control Plane (AUTHORIZED):** The APIs correctly reflect that your account has successfully accepted the EULA and holds the Marketplace entitlement.
* **Data Plane (AccessDeniedException):** Despite the authorization, the backend Tokens-Per-Minute (TPM) quota for this specific new model has not been provisioned yet (effectively sitting at 0). This discrepancy triggers the "not available" error at runtime, which can easily be mistaken for an IAM or credential issue.

Because this is a backend discrepancy regarding the runtime quota rather than a simple synchronization delay, waiting or re-triggering the agreement will not resolve it.

**How to resolve it:**
I would strongly recommend opening an AWS Support case (and involving your TAM/Account Manager if you have one). Provide them with your specific region (`us-east-1`) and ask them to verify and provision the backend TPM quotas for `anthropic.claude-opus-4-8`. Once the backend quota is explicitly allocated, the runtime will start accepting requests.

Claude Opus 4.8 on Bedrock returns AccessDeniedException at runtime despite AUTHORIZED/AVAILABLE entitlement

Add your answer

Relevant content