{"name":"AWS_SECRET_ACCESS_KEY","slug":"aws-secret-access-key","family":"env","title":"Environment variables","noun":"environment variable","description":"Policy-helper environment scrubbing moved into its own module and now strips more variables","description_source":"entry","described_by":{"version":"2.1.235","anchor":"policy-helper-subprocess-environment-scrubbing-moved-and-har"},"presence":{"first_seen":"2.1.138","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":149,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.273","anchor":"aws-credential-env-var-forwarding-no-functional-change-fou","heading":"AWS credential env var forwarding \u2014 no functional change found","line":"No functional change found in sandboxed AWS credential detection and masking","released_at":"2026-09-15 18:06:34","reason":"found in this entry's text"},{"version":"2.1.235","anchor":"policy-helper-subprocess-environment-scrubbing-moved-and-har","heading":"Policy-helper subprocess environment scrubbing moved and hardened","line":"Policy-helper environment scrubbing moved into its own module and now strips more variables","released_at":"2026-08-18 18:24:10","reason":"found in this entry's text"},{"version":"2.1.202","anchor":"unified-credential-error-messages-for-cloud-providers","heading":"Unified Credential Error Messages for Cloud Providers","line":null,"released_at":"2026-07-06 20:41:23","reason":"found in this entry's text"},{"version":"2.1.79","anchor":"subprocess-environment-scrubbing","heading":"Subprocess Environment Scrubbing","line":null,"released_at":"2026-03-18 21:34:08","reason":"found in this entry's text"}],"entries_total":4,"docs":[{"source":"api","path":"build-with-claude\/claude-in-amazon-bedrock","title":"claude-in-amazon-bedrock","documented":false},{"source":"api","path":"build-with-claude\/claude-on-amazon-bedrock-legacy","title":"claude-on-amazon-bedrock-legacy","documented":false},{"source":"api","path":"build-with-claude\/claude-platform-on-aws","title":"claude-platform-on-aws","documented":false},{"source":"claude-code","path":"amazon-bedrock","title":"Claude Code on Amazon Bedrock","documented":false},{"source":"claude-code","path":"claude-apps-gateway","title":"Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry","documented":false},{"source":"claude-code","path":"claude-apps-gateway-config","title":"Claude apps gateway configuration","documented":false},{"source":"claude-code","path":"gitlab-ci-cd","title":"Claude Code GitLab CI\/CD","documented":false},{"source":"claude-code","path":"sandboxing","title":"Configure the sandboxed Bash tool","documented":false},{"source":"claude-code","path":"settings-reference","title":"All settings","documented":false}],"docs_total":9,"gates":[],"related":[{"name":"AWS_ACCESS_KEY_ID","slug":"aws-access-key-id","description":"gh, aws, gcloud, bq and gsutil get placeholder credentials so they authenticate through the proxy instead of failing."},{"name":"AWS_BEARER_TOKEN_BEDROCK","slug":"aws-bearer-token-bedrock","description":"Amazon Bedrock API key for authentication (see [Amazon Bedrock API keys](https:\/\/aws.amazon.com\/blogs\/machine-learning\/accelerate-ai-development-with-amazon-bedrock-api-keys\/))"},{"name":"AWS_CA_BUNDLE","slug":"aws-ca-bundle","description":"SSL certificate error message now lists the specific env var to check per tool"},{"name":"AWS_CONFIG_FILE","slug":"aws-config-file","description":"AWS SSO profile logins resolve faster via a direct fast path, falling back if anything unusual is configured."},{"name":"AWS_CONTAINER_CREDENTIALS_FULL_URI","slug":"aws-container-credentials-full-uri","description":"Claude Code's saved check that a Bedrock model is reachable is now tied to your AWS profile, keys, role and credential settings"},{"name":"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI","slug":"aws-container-credentials-relative-uri","description":"Stand-in credential values for gh, AWS and gcloud are defined, with substitution rules unsettled."},{"name":"AWS_DEFAULT_REGION","slug":"aws-default-region","description":"Bedrock no longer refuses to start when no region or base URL is configured."},{"name":"AWS_ENDPOINT_URL","slug":"aws-endpoint-url","description":"AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately."},{"name":"AWS_ENDPOINT_URL_BEDROCK","slug":"aws-endpoint-url-bedrock","description":"AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately."},{"name":"AWS_ENDPOINT_URL_BEDROCK_RUNTIME","slug":"aws-endpoint-url-bedrock-runtime","description":"AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/aws-secret-access-key","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}