I’d really suggest to run Claude Code in a sandbox! Anthropic can’t be trusted.

I run it on Mac with sandbox-exec. No access to AWS, database, pretty much just files in the current folder. Even if it goes rogue, it can’t do much harm.