{"name":"sigv4","slug":"sigv4","family":"setting","title":"Settings keys","noun":"settings key","description":"Managed limits on which AWS credentials the sandbox may use survive settings merges now.","description_source":"entry","described_by":{"version":"2.1.224","anchor":"sandbox-credential-restrictions-no-longer-lost-when-settings"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.309","builds":0,"mined_builds":150,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.268","anchor":"new-aws-sigv4-masked-credential-signing-policy-default-deny","heading":"New AWS SigV4 masked-credential signing policy, default deny","line":"New sandbox setting controls whether AWS-signed requests the proxy can't re-sign are denied or passed through","released_at":"2026-09-10 18:41:11","reason":"found in this entry's text, named in this entry"},{"version":"2.1.224","anchor":"sandbox-credential-restrictions-no-longer-lost-when-settings","heading":"Sandbox credential restrictions no longer lost when settings are merged","line":"Managed limits on which AWS credentials the sandbox may use survive settings merges now.","released_at":"2026-08-07 01:36:32","reason":"found in this entry's text"},{"version":"2.1.224","anchor":"sandbox-credential-masking-gains-jwt-handling-per-claim-mask","heading":"Sandbox credential masking gains JWT handling, per-claim masking and AWS SigV4 re-signing","line":"Sandbox credential masking can fake JWTs, mask single claims, and re-sign AWS requests after swapping keys.","released_at":"2026-08-07 01:36:32","reason":"named in this entry, found in this entry's text"}],"entries_total":3,"docs":[{"source":"api","path":"api\/claude-platform-on-aws-iam-actions","title":"claude-platform-on-aws-iam-actions","documented":false},{"source":"api","path":"api\/errors","title":"errors","documented":false},{"source":"api","path":"build-with-claude\/claude-in-amazon-bedrock","title":"claude-in-amazon-bedrock","documented":false},{"source":"api","path":"build-with-claude\/claude-on-amazon-bedrock-legacy","title":"claude-on-amazon-bedrock-legacy","documented":false},{"source":"api","path":"build-with-claude\/claude-platform-on-aws","title":"claude-platform-on-aws","documented":false},{"source":"api","path":"managed-agents\/self-hosted-sandboxes","title":"spawn.sh: called once per claimed work item","documented":false},{"source":"api","path":"managed-agents\/vaults","title":"vaults","documented":false},{"source":"claude-code","path":"amazon-bedrock","title":"Claude Code on Amazon Bedrock","documented":false},{"source":"claude-code","path":"changelog","title":"Claude Code changelog","documented":false},{"source":"claude-code","path":"claude-apps-gateway","title":"Claude apps gateway for Amazon Bedrock, Claude Platform on AWS, Google Cloud, and Microsoft Foundry","documented":false}],"docs_total":12,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/sigv4","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}