{"name":"AWS_WEB_IDENTITY_TOKEN_FILE","slug":"aws-web-identity-token-file","family":"env","title":"Environment variables","noun":"environment variable","description":"Read by the bundled AWS SDK's web identity credential provider: together with `AWS_ROLE_ARN` it names a file whose token is exchanged through STS `AssumeRoleWithWebIdentity`, with the session name from `AWS_ROLE_SESSION_NAME` or else `aws-sdk-js-session-<ms>`. Claude Code also includes its value in the fingerprint under which it remembers Bedrock and Mantle model-access checks.","description_source":"code","described_by":{"bundle":"2.1.286","author":"claude-opus-5-5"},"presence":{"first_seen":"2.1.178","removed_in":null,"in_current_build":true,"newest_mined":"2.1.308","builds":113,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[],"entries_total":0,"docs":[{"source":"api","path":"build-with-claude\/claude-platform-on-aws","title":"claude-platform-on-aws","documented":false},{"source":"api","path":"manage-claude\/wif-providers\/aws","title":"aws","documented":false},{"source":"claude-code","path":"gitlab-ci-cd","title":"Claude Code GitLab CI\/CD","documented":false}],"docs_total":3,"gates":[],"related":[{"name":"AWS_ACCESS_KEY_ID","slug":"aws-access-key-id","description":"gh, aws, gcloud, bq and gsutil get placeholder credentials so they authenticate through the proxy instead of failing."},{"name":"AWS_BEARER_TOKEN_BEDROCK","slug":"aws-bearer-token-bedrock","description":"Amazon Bedrock API key for authentication (see [Amazon Bedrock API keys](https:\/\/aws.amazon.com\/blogs\/machine-learning\/accelerate-ai-development-with-amazon-bedrock-api-keys\/))"},{"name":"AWS_CA_BUNDLE","slug":"aws-ca-bundle","description":"SSL certificate error message now lists the specific env var to check per tool"},{"name":"AWS_CONFIG_FILE","slug":"aws-config-file","description":"AWS SSO profile logins resolve faster via a direct fast path, falling back if anything unusual is configured."},{"name":"AWS_CONTAINER_CREDENTIALS_FULL_URI","slug":"aws-container-credentials-full-uri","description":"Claude Code's saved check that a Bedrock model is reachable is now tied to your AWS profile, keys, role and credential settings"},{"name":"AWS_CONTAINER_CREDENTIALS_RELATIVE_URI","slug":"aws-container-credentials-relative-uri","description":"Stand-in credential values for gh, AWS and gcloud are defined, with substitution rules unsettled."},{"name":"AWS_DEFAULT_REGION","slug":"aws-default-region","description":"Bedrock no longer refuses to start when no region or base URL is configured."},{"name":"AWS_ENDPOINT_URL","slug":"aws-endpoint-url","description":"AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately."},{"name":"AWS_ENDPOINT_URL_BEDROCK","slug":"aws-endpoint-url-bedrock","description":"AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately."},{"name":"AWS_ENDPOINT_URL_BEDROCK_RUNTIME","slug":"aws-endpoint-url-bedrock-runtime","description":"AWS and Google custom endpoint variables are now forwarded and scrubbed deliberately."}],"url":"https:\/\/changelogs.core-directive.com\/reference\/env\/aws-web-identity-token-file","family_url":"https:\/\/changelogs.core-directive.com\/reference\/env.json"}