{"version":"2.0.2","anchor":"aws-credential-workspace-trust-checks","canonical_anchor":"aws-credential-workspace-trust-checks","heading":"AWS Credential Workspace Trust Checks","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.0.2\/e\/aws-credential-workspace-trust-checks","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.0.2","markdown":"### AWS Credential Workspace Trust Checks\n\n**What:** Added security checks to prevent AWS credential operations before workspace trust is confirmed\n\n**Details:**\n\n- Both `awsAuthRefresh` and `awsCredentialExport` settings now verify workspace trust before execution\n- When these settings come from project or local configuration files, the system checks if the workspace has been explicitly trusted by the user\n- If executed before trust confirmation, the system logs a security warning and reports telemetry\n- Non-interactive sessions (`-p` mode) bypass these checks as they don't have interactive trust dialogs\n- **Evidence**: Security check implementation at `oH5() at line 438469` and `tH5() at line 438512`\n\n**Why this matters:** Prevents malicious projects from triggering AWS credential refresh or export commands that could exfiltrate credentials before the user has reviewed and trusted the workspace."}