claude tries to access models it doesn't have permission to use and returns 403

[nd-kurnal]

Describe the bug

[log_4dad79] sending request {
  method: 'post',
  url: 'https://bedrock-runtime.us-east-1.amazonaws.com/model/us.anthropic.claude-3-5-haiku-20241022-v1:0/invoke-with-response-stream',
  options: {
    method: 'post',
    path: '/model/us.anthropic.claude-3-5-haiku-20241022-v1:0/invoke-with-response-stream',
    body: {
      model: undefined,
      max_tokens: 512,
      messages: [Array],
      system: [Array],
      temperature: 0,
      metadata: [Object],
      stream: undefined,
      anthropic_version: 'bedrock-2023-05-31'
    },
    timeout: 60000,
    signal: AbortSignal { aborted: false },
    stream: true,
    __streamClass: [class vy1 extends AX]
  },
  headers: {
    accept: 'application/json',
    'anthropic-dangerous-direct-browser-access': 'true',
    'anthropic-version': '2023-06-01',
    authorization: '***',
    'content-type': 'application/json',
    host: 'bedrock-runtime.us-east-1.amazonaws.com',
    'user-agent': 'claude-cli/1.0.64 (external, cli)',
    'x-amz-content-sha256': 'be2ab127339f118019ee98806815e2cb78d988841098a772b0d90e0efdd20fce',
    'x-amz-date': '20250731T212734Z',
    'x-amz-security-token': '***',
    'x-api-key': '***',
    'x-app': 'cli',
    'x-stainless-arch': 'x64',
    'x-stainless-helper-method': 'stream',
    'x-stainless-lang': 'js',
    'x-stainless-os': 'Linux',
    'x-stainless-package-version': '0.55.1',
    'x-stainless-retry-count': '0',
    'x-stainless-runtime': 'node',
    'x-stainless-runtime-version': 'v20.10.0',
    'x-stainless-timeout': '60'
  }
}
[log_4dad79] post https://bedrock-runtime.us-east-1.amazonaws.com/model/us.anthropic.claude-3-5-haiku-20241022-v1:0/invoke-with-response-stream failed with status 403 in 103ms - error; not retryable
[log_4dad79] response error (error; not retryable) {
  url: 'https://bedrock-runtime.us-east-1.amazonaws.com/model/us.anthropic.claude-3-5-haiku-20241022-v1:0/invoke-with-response-stream',
  status: 403,
  headers: {
    connection: 'keep-alive',
    'content-length': '368',
    'content-type': 'application/json',
    date: 'Thu, 31 Jul 2025 21:27:34 GMT',
    'x-amzn-errortype': 'AccessDeniedException:http://internal.amazon.com/coral/com.amazon.coral.service/',
    'x-amzn-requestid': '46945303-d8b3-40cb-ad68-58cfbd39b9de'
  },
  message: undefined,
  durationMs: 104
}

To Reproduce
This is happening in all Claude workflows I run on my PRs.

Expected behavior
A 403 should never happen and claude should only use models it has permission to use.

Screenshots
If applicable, add screenshots to help explain your problem.

Workflow yml file
If it's not sensitive, consider including a paste of your full Claude workflow.yml file.

API Provider

[ ] Anthropic First-Party API (default)
[ ] AWS Bedrock
[ ] GCP Vertex

Additional context
Add any other context about the problem here.

[nd-kurnal]

why is it that when i specify model: "us.anthropic.claude-3-7-sonnet-20250219-v1:0" in the YAML—it goes ahead and proceeds to use other models?

we don't have permissions enabled for all models in our AWS Bedrock.

[rbrownejr]

Where's the uproar? This is still occurring, and it really is a WHY?

[sseely-experity]

I'm only seeing the Haiku model requested on bash pre-flight requests. After it errors out enough times, Claude proceeds and runs commands just fine.

Should we be adding the Haiku model to the application-inference-profile?

[pure-fresh-cream]

I'm also encountering a similar situation.
In my case, I've specified Sonnet4 in the AWS Bedrock application inference profile and haven't allowed any other models, but according to the debug results, after using Sonnet4 several times, it starts calling the haiku3.5 model (which results in a 403 error).
I haven't been able to determine whether the issue lies with claude-code-action or claude-cli.

[pure-fresh-cream]

It appears that similar issues with the model being changed during use have been reported with claude-code (claude-cli) as well.
anthropics/claude-code#5108

[sseely-experity]

It seems that the model for "background functionality" is always going to default to a Haiku model. I found that the Claude Code could be adjusted to use whatever was in my arn reference by setting the ANTHROPIC_DEFAULT_HAIKU_MODEL environment variable. I found the setting by reading this doc page: https://docs.claude.com/en/docs/claude-code/model-config#environment-variables.

[ashwin-ant]

@sseely-experity is correct, you can either configure the Haiku model to be some other model via these instructions or enable Haiku in your Bedrock settings.