Environment variables, all 1,448.

AGENT_PROXY_AUTH_TOKEN ◇ Read and then removed from the environment by the agent proxy's startup step in a remote session, together with AGENT_PROXY_URL; the proxy only uses it when enabled (CLAUDE_CODE_REMOTE and CCR_AGENT_PROXY_ENABLED set, with a CLAUDE_CODE_REMOTE_SESSION_ID). When set, the relay WebSocket authenticates with this token in place of the session token, and the proxy starts even if no session token is found. Claude Code also lists it among the credentials it strips from the environment of commands it runs, and a settings file's env block cannot set it.v2.1.138 or earlier → v2.1.308 ◆in the build AGENT_PROXY_URL ◇ Read and then removed from the environment by the agent proxy's startup step, together with AGENT_PROXY_AUTH_TOKEN; it only matters when the proxy is enabled (CLAUDE_CODE_REMOTE and CCR_AGENT_PROXY_ENABLED set, with a CLAUDE_CODE_REMOTE_SESSION_ID). When set, the proxy fetches its CA from this URL and opens its relay WebSocket there instead of at the base URL it would otherwise use (normally ANTHROPIC_BASE_URL, default https://api.anthropic.com), and CCR_AGENT_PROXY_RELAY_MODE=selective and CCR_AGENT_PROXY_CA_CERT_B64 are ignored. A settings file's env block cannot set it, and the self-hosted runner does not clear CCR_AGENT_PROXY_ENABLED for a session whose environment variables include it.v2.1.138 or earlier → v2.1.308 ◆in the build AI_AGENT ◇ Written by Claude Code so child processes can tell they run under it. At startup, if it is unset or already starts with claude-code_ or claude-code/, it is set to claude-code_<version>_harness with the version's dots turned into dashes (claude-code_2-1-286_harness); any other value is left alone. Shell commands run for the model get claude-code_<version>_agent instead, set over the inherited value.v2.1.138 or earlier → v2.1.308 ◆in the build ALACRITTY_LOG ◇ Read as a sign of the Alacritty terminal. Terminal detection identifies the terminal as alacritty when it is set and none of the earlier checks match (IDE markers, TERM and TERM_PROGRAM, TMUX, STY, and the variables of other terminals up to KITTY_WINDOW_ID). Any non-empty value also counts as strikethrough support (unless TERM_PROGRAM is Apple_Terminal or TERM is linux), so markdown ~~text~~ is drawn struck through when colors are on rather than shown with the tildes.v2.1.138 or earlier → v2.1.308 ◆in the build ALACRITTY_WINDOW_ID ◇ No description from anybody.v2.1.296 → v2.1.308 ◆in the build ALL_PROXY ◇ Concurrent sandboxes now get unique proxy usernames instead of sharing one identity.v2.1.210 → v2.1.308 ◆in the build ALLOW_ANT_COMPUTER_USE_MCP ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ALLUSERSPROFILE ◇ Claude Code now passes more Windows environment variables through, including ALLUSERSPROFILE, SYSTEMDRIVE and the COMMONPROGRAMFILES onesv2.1.282 → v2.1.308 ◆in the build ANDROID_HOME ◇ Read when Claude Code collects the host profile that Remote Control sends while registering an environment, a list of the developer toolchains on the machine. If it passes a path safety check and names an existing directory, android-sdk goes on that list; ANDROID_SDK_ROOT is consulted only when ANDROID_HOME is unset. The profile is collected only when the tengu_bridge_host_profile flag (default off) enables it, subject to the remoteControl.shareHostProfile setting.v2.1.260 → v2.1.308 ◆in the build ANDROID_SDK_ROOT ◇ Fallback for ANDROID_HOME, read only when ANDROID_HOME is unset, while Claude Code collects the host profile that Remote Control sends when registering an environment. If it passes a path safety check and names an existing directory, android-sdk is listed among the machine's toolchains. The profile is collected only when the tengu_bridge_host_profile flag (default off) enables it, subject to the remoteControl.shareHostProfile setting.v2.1.260 → v2.1.308 ◆in the build ANT_CLAUDE_CODE_METRICS_ENDPOINT ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ANT_OTEL_EXPORTER_OTLP_ENDPOINT ◇ Telemetry endpoint settings now accept gRPC-style URL schemes like grpc, otlp and tcp, not just http/httpsv2.1.160 → v2.1.308 ◆in the build ANT_OTEL_EXPORTER_OTLP_HEADERS ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ANT_OTEL_EXPORTER_OTLP_PROTOCOL ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ANT_OTEL_LOGS_EXPORTER ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ANT_OTEL_METRICS_EXPORTER ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ANT_OTEL_RESOURCE_ATTRIBUTES ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ANT_OTEL_TRACES_EXPORTER ◇ No description from anybody.v2.1.160 → v2.1.308 ◆in the build ANTHROPIC_API_KEY API key sent as X-Api-Key header. When set, this key is used instead of your Claude Pro, Max, Team, or Enterprise subscription even if you are logged in. In non-interactive mode (-p), the key is always used when present. In interactive mode, you are prompted to approve the key once before it overrides your subscription. To use your subscription instead, run unset ANTHROPIC_API_KEYv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_AUTH_TOKEN Custom value for the Authorization header (the value you set here will be prefixed with Bearer )v2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_AWS_API_KEY Workspace API key for Claude Platform on AWS, generated in the AWS Console. Sent as x-api-key and takes precedence over AWS SigV4v2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_AWS_BASE_URL Override the Claude Platform on AWS endpoint URL. Use for custom regions or when routing through an LLM gateway. Defaults to https://aws-external-anthropic.{region}.api.aws. Claude Code resolves the region with the same precedence as on Amazon Bedrockv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_AWS_WORKSPACE_ID Required for Claude Platform on AWS. Sent on every request as the anthropic-workspace-id headerv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_BASE_URL Override the API endpoint to route requests through a proxy or gateway. When set to a non-first-party host, MCP tool search is disabled by default. Set ENABLE_TOOL_SEARCH=true if your proxy forwards tool_reference blocks. As of v2.1.196, Remote Control is disabled when this points at a host other than api.anthropic.com, matching its behavior on Amazon Bedrock, Google Cloud's Agent Platform, and Microsoft Foundryv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_BEDROCK_BASE_URL Override the Amazon Bedrock endpoint URL. Use for custom Amazon Bedrock endpoints or when routing through an LLM gateway. See Amazon Bedrockv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_BEDROCK_MANTLE_BASE_URL Override the Amazon Bedrock Mantle endpoint URL. See Mantle endpointv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_BEDROCK_REGION_PREFIX Cross-region inference profile prefix (us, eu, apac, jp, au, or global) Claude Code tries first instead of the one derived from the AWS region. Ignored in AWS GovCloud regions. Requires Claude Code v2.1.224 or later. See Amazon Bedrockv2.1.224 → v2.1.308 ◆in the build ANTHROPIC_BEDROCK_SERVICE_TIER Amazon Bedrock service tier (default, flex, or priority). Sent as the X-Amzn-Bedrock-Service-Tier header. See Amazon Bedrockv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_BETAS Comma-separated list of additional anthropic-beta header values to include in API requests. Claude Code already sends the beta headers it needs; use this to opt into an Anthropic API beta before Claude Code adds native support. Unlike the --betas flag, which requires API key authentication, this variable works with all auth methods including Claude.ai subscriptionv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_CONFIG_DIR ◇ When Claude Code runs without disk access, it now skips its saved model-capabilities file and does not look for an Anthropic config folderv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_CUSTOM_HEADERS Custom headers to add to requests (Name: Value format, newline-separated for multiple headers). If a name or value contains a character an HTTP header can't carry, such as a curly quote or a zero-width space, the request fails with an error that identifies the pair by position. Requires Claude Code v2.1.227 or later. Invalid request header value lists the exact character set and where the check runs. A value that sets a credential, org or tenant, routing, or API-behavior header, such as Authorization or Host, counts as a setting that needs approval when server-managed settings deliver it. From project or local settings, such a value follows the rules for when env values applyv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_CUSTOM_MODEL_OPTION Model ID to add as a custom entry in the /model picker. Use this to make a non-standard or gateway-specific model selectable without replacing built-in aliases. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_CUSTOM_MODEL_OPTION_DESCRIPTION Display description for the custom model entry in the /model picker. Defaults to Custom model (<model-id>) when not setv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_CUSTOM_MODEL_OPTION_NAME Display name for the custom model entry in the /model picker. When not set, the entry shows the model's name if Claude Code recognizes the ID, and the model ID otherwisev2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_FABLE_MODEL Model ID that the fable alias resolves to, and the ID Claude Code recognizes as a Fable model for automatic model fallback on third-party providers. See Model configurationv2.1.170 → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_FABLE_MODEL_DESCRIPTION Display description for the pinned Fable model in the /model picker. When not set, the row shows a default description that begins Custom Fable model. See Model configurationv2.1.170 → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_FABLE_MODEL_NAME Display name for the pinned Fable model in the /model picker. When not set, the row shows the model's name if Claude Code recognizes the pinned ID, and the pinned ID otherwise. See Model configurationv2.1.170 → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_HAIKU_MODEL Model ID that the haiku alias resolves to, also used for background functionality. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_HAIKU_MODEL_DESCRIPTION Display description for the pinned Haiku model in the /model picker. When not set, the row shows a default description that begins Custom Haiku model. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_HAIKU_MODEL_NAME Display name for the pinned Haiku model in the /model picker. When not set, the row shows the model's name if Claude Code recognizes the pinned ID, and the pinned ID otherwise. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_MODEL Model that new sessions start on by default. Requires Claude Code v2.1.236 or later. See Set a default model for new sessionsv2.1.236 → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_OPUS_MODEL Model ID that the opus alias resolves to, and that opusplan uses while Plan Mode is active. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_OPUS_MODEL_DESCRIPTION Display description for the pinned Opus model in the /model picker. When not set, the row shows a default description that begins Custom Opus model. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_OPUS_MODEL_NAME Display name for the pinned Opus model in the /model picker. When not set, the row shows the model's name if Claude Code recognizes the pinned ID, and the pinned ID otherwise. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_SONNET_MODEL Model ID that the sonnet alias resolves to, and that opusplan uses when Plan Mode is not active. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_SONNET_MODEL_DESCRIPTION Display description for the pinned Sonnet model in the /model picker. When not set, the row shows a default description that begins Custom Sonnet model. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_DEFAULT_SONNET_MODEL_NAME Display name for the pinned Sonnet model in the /model picker. When not set, the row shows the model's name if Claude Code recognizes the pinned ID, and the pinned ID otherwise. See Model configurationv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_ENVIRONMENT_ID ◇ No description from anybody.v2.1.145 → v2.1.245 ○gone ANTHROPIC_ENVIRONMENT_KEY ◇ No description from anybody.v2.1.145 → v2.1.245 ○gone ANTHROPIC_FEDERATION_RULE_ID Federation rule ID for Workload Identity Federation. When you set it together with ANTHROPIC_ORGANIZATION_ID, Claude Code selects federation credentials, which rank above your /login credential. See authentication precedencev2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_FOUNDRY_API_KEY API key for Microsoft Foundry authentication (see Microsoft Foundry)v2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_FOUNDRY_AUTH_TOKEN Bearer token for Microsoft Foundry authentication, such as a Microsoft Entra access token. Claude Code sends it as the Authorization: Bearer header. Takes precedence over ANTHROPIC_FOUNDRY_API_KEY and over the Azure default credential chain. See Microsoft Foundry. Requires Claude Code v2.1.203 or laterv2.1.203 → v2.1.308 ◆in the build ANTHROPIC_FOUNDRY_BASE_URL Full base URL for the Microsoft Foundry resource (for example, https://my-resource.services.ai.azure.com/anthropic). Alternative to ANTHROPIC_FOUNDRY_RESOURCE (see Microsoft Foundry)v2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_FOUNDRY_RESOURCE Microsoft Foundry resource name (for example, my-resource). Required if ANTHROPIC_FOUNDRY_BASE_URL is not set (see Microsoft Foundry)v2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_GOOGLE_CLOUD_BASE_URL ◇ Claude Code now checks ANTHROPIC_GOOGLE_CLOUD_BASE_URL like the Vertex and Mantle providers when deciding if the default endpoint is in usev2.1.213 → v2.1.308 ◆in the build ANTHROPIC_GOOGLE_CLOUD_LOCATION ◇ Google Cloud location for Claude Platform on Google Cloud (the anthropicGoogleCloud provider). Unless a base URL is set, the SDK client builds requests to https://claude.googleapis.com/v1alpha/projects/<project>/locations/<location>/workspaces/<workspace>/invoke, with the location defaulting to global. Claude Code throws an error if the value contains anything other than letters, digits, hyphens and underscores, and /status shows it as "GCP location".v2.1.213 → v2.1.308 ◆in the build ANTHROPIC_GOOGLE_CLOUD_PROJECT ◇ GCP credential checks now report why they failed instead of just pass/fail.v2.1.213 → v2.1.308 ◆in the build ANTHROPIC_GOOGLE_CLOUD_WORKSPACE_ID ◇ The Google Cloud client now raises its "No workspace ID found" error when a request is sent, not when the client is createdv2.1.213 → v2.1.308 ◆in the build ANTHROPIC_MODEL Name of the model setting to use (see Model Configuration)v2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_ORGANIZATION_ID Organization ID for Workload Identity Federation. Set it together with ANTHROPIC_FEDERATION_RULE_ID. See authentication precedencev2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_PROFILE Name of the Anthropic profile to authenticate with, such as one created by ant auth login or by signing in to a Console account without an API key. See authentication precedencev2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_SMALL_FAST_MODEL \[DEPRECATED] Name of Haiku-class model for background tasksv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_SMALL_FAST_MODEL_AWS_REGION Override AWS region for the Haiku-class model when using Amazon Bedrock or Amazon Bedrock Mantle. On Amazon Bedrock, this only takes effect when ANTHROPIC_DEFAULT_HAIKU_MODEL or the deprecated ANTHROPIC_SMALL_FAST_MODEL is also set, since Amazon Bedrock otherwise runs background tasks on the default Sonnet model or the primary model in the session regionv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_UNIX_SOCKET ◇ Environment variables your org policy blocks can no longer sneak through by changing their capitalization.v2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_VERTEX_BASE_URL Override Google Cloud's Agent Platform endpoint URL. Use for custom Google Cloud's Agent Platform endpoints or when routing through an LLM gateway. See Google Cloud's Agent Platformv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_VERTEX_PROJECT_ID GCP project ID that Google Cloud's Agent Platform requests are addressed to. See Configure GCP credentialsv2.1.138 or earlier → v2.1.308 ◆in the build ANTHROPIC_WEBHOOK_SIGNING_KEY ◇ The bundled client now reads a webhook signing key from ANTHROPIC_WEBHOOK_SIGNING_KEY.never mined ·never mined ANTHROPIC_WORK_SECRET ◇ Shared memory stores now mount on your own sandbox workers, with tunable sync interval and deletion handling.never mined ·never mined ANTHROPIC_WORKSPACE_ID Workspace ID for workload identity federation. Set this when your federation rule is scoped to more than one workspace so the token exchange knows which workspace to targetv2.1.141 → v2.1.308 ◆in the build API_FORCE_IDLE_TIMEOUT Override the 5-minute body idle timeout that aborts a streaming model response when no bytes arrive. Set to 0 to turn the timeout off, for example when a slow gateway or local model pauses longer than 5 minutes between chunks, or 1 to keep it on for every provider. When unset, the timeout is active on providers other than the direct Anthropic API and Claude Platform on AWS. The stream watchdogs run independently of it and abort a long silent pause even when you set 0 herev2.1.138 or earlier → v2.1.308 ◆in the build API_MAX_INPUT_TOKENS ◇ No description from anybody.v2.1.160 → v2.1.211 ○gone API_TARGET_INPUT_TOKENS ◇ No description from anybody.v2.1.160 → v2.1.211 ○gone API_TIMEOUT_MS Timeout for API requests in milliseconds (default: 600000, or 10 minutes; maximum: 2147483647). Increase this when requests time out on slow networks or when routing through a proxy. Values above the maximum overflow the underlying timer and cause requests to fail immediatelyv2.1.138 or earlier → v2.1.308 ◆in the build API_TOKEN ◇ No description from anybody.v2.1.160 → v2.1.217 ○gone APP_URL ◇ Read by deployment-environment detection: when its value contains ondigitalocean.app and no earlier check matched, the environment is reported as digitalocean-app-platform in the deployment_environment field of Claude Code's telemetry metadata.v2.1.138 or earlier → v2.1.308 ◆in the build APPDATA ◇ On Windows, the Credentials, Vault and Protect folders are now protected paths that cannot be readv2.1.138 or earlier → v2.1.308 ◆in the build AUTOMODE_DECISION_LOG ◇ In one restricted mode, managed settings keep their claudeMd, the auto mode decision log is skipped, and token checks refuse unanchored claimsv2.1.160 → v2.1.308 ◆in the build AWS_ACCESS_KEY_ID ◇ gh, aws, gcloud, bq and gsutil get placeholder credentials so they authenticate through the proxy instead of failing.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_BEARER_TOKEN_BEDROCK Amazon Bedrock API key for authentication (see Amazon Bedrock API keys)v2.1.138 or earlier → v2.1.308 ◆in the build AWS_CA_BUNDLE ◇ SSL certificate error message now lists the specific env var to check per toolv2.1.251 → v2.1.308 ◆in the build AWS_CONFIG_FILE ◇ AWS SSO profile logins resolve faster via a direct fast path, falling back if anything unusual is configured.v2.1.172 → v2.1.308 ◆in the build AWS_CONTAINER_CREDENTIALS_FULL_URI ◇ Claude Code's saved check that a Bedrock model is reachable is now tied to your AWS profile, keys, role and credential settingsv2.1.178 → v2.1.308 ◆in the build AWS_CONTAINER_CREDENTIALS_RELATIVE_URI ◇ Stand-in credential values for gh, AWS and gcloud are defined, with substitution rules unsettled.v2.1.178 → v2.1.308 ◆in the build AWS_DEFAULT_REGION ◇ Bedrock no longer refuses to start when no region or base URL is configured.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_ENDPOINT_URL ◇ AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately.v2.1.239 → v2.1.308 ◆in the build AWS_ENDPOINT_URL_BEDROCK ◇ AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately.v2.1.285 → v2.1.308 ◆in the build AWS_ENDPOINT_URL_BEDROCK_RUNTIME ◇ AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately.v2.1.285 → v2.1.308 ◆in the build AWS_ENDPOINT_URL_STS ◇ AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately.v2.1.239 → v2.1.308 ◆in the build AWS_EXECUTION_ENV ◇ Read by deployment-environment detection: AWS_ECS_FARGATE reports aws-fargate and AWS_ECS_EC2 reports aws-ecs in the deployment_environment telemetry field, when no earlier check (including AWS_LAMBDA_FUNCTION_NAME) matched. The bundled AWS SDK also adds exec-env/<value> to its user agent, and in its auto defaults mode treats AWS_REGION or AWS_DEFAULT_REGION as the running region when this is set.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_LAMBDA_BENCHMARK_MODE ◇ No description from anybody.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_LAMBDA_FUNCTION_NAME ◇ Read by deployment-environment detection: when it is set and no earlier check matched, the environment is reported as aws-lambda in the deployment_environment telemetry field. The bundled AWS SDK's recursion-detection middleware also reads it: when it and a Lambda trace ID (from the Lambda invoke store or _X_AMZN_TRACE_ID) are both present, AWS requests without an X-Amzn-Trace-Id header get one carrying that trace ID.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_LOGIN_CACHE_DIRECTORY ◇ Read by the bundled AWS SDK's aws login credential provider (a profile with login_session). It sets the directory holding the cached login token, default ~/.aws/login/cache; the token file inside is <sha256 of login_session>.json, read from and saved back to that directory.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_PROFILE ◇ Bedrock auth settings now document exactly which env var each is passed as.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_REGION ◇ Bedrock no longer refuses to start when no region or base URL is configured.v2.1.138 or earlier → v2.1.308 ◆in the build AWS_ROLE_ARN ◇ Claude Code's saved check that a Bedrock model is reachable is now tied to your AWS profile, keys, role and credential settingsv2.1.178 → v2.1.308 ◆in the build AWS_SECRET_ACCESS_KEY ◇ Policy-helper environment scrubbing moved into its own module and now strips more variablesv2.1.138 or earlier → v2.1.308 ◆in the build AWS_SESSION_TOKEN ◇ Remote-delivered policy helpers now require explicit consent and run with a scrubbed environmentv2.1.138 or earlier → v2.1.308 ◆in the build AWS_SHARED_CREDENTIALS_FILE ◇ Claude Code's saved check that a Bedrock model is reachable is now tied to your AWS profile, keys, role and credential settingsv2.1.172 → v2.1.308 ◆in the build AWS_USE_FIPS_ENDPOINT ◇ The Claude Apps gateway can now take on an AWS role separately for each user, naming each session after that user's identityv2.1.281 → v2.1.308 ◆in the build AWS_WEB_IDENTITY_TOKEN_FILE ◇ Read by the bundled AWS SDK's web identity credential provider: together with AWS_ROLE_ARN it names a file whose token is exchanged through STS AssumeRoleWithWebIdentity, with the session name from AWS_ROLE_SESSION_NAME or else aws-sdk-js-session-<ms>. Claude Code also includes its value in the fingerprint under which it remembers Bedrock and Mantle model-access checks.v2.1.178 → v2.1.308 ◆in the build