{"version":"2.1.202","anchor":"aws-and-gcp-credential-environment-variables-forwarded-to-su","canonical_anchor":"aws-and-gcp-credential-environment-variables-forwarded-to-su","heading":"AWS and GCP Credential Environment Variables Forwarded to Subagents","tier":null,"area":null,"scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.202\/e\/aws-and-gcp-credential-environment-variables-forwarded-to-su","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.202","markdown":"### AWS and GCP Credential Environment Variables Forwarded to Subagents\n\nSeveral cloud SDK environment variables that were previously not forwarded to spawned subagents are now included in the forwarded set.\n\nNewly forwarded variables:\n\n- `GCLOUD_PROJECT`, `GOOGLE_CLOUD_QUOTA_PROJECT`\n- `GCE_METADATA_HOST`, `GCE_METADATA_IP`, `METADATA_SERVER_DETECTION`\n- `AWS_CONTAINER_CREDENTIALS_FULL_URI`, `AWS_CONTAINER_CREDENTIALS_RELATIVE_URI`\n- `AWS_CONTAINER_AUTHORIZATION_TOKEN`, `AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE`\n- `AWS_EC2_METADATA_SERVICE_ENDPOINT`, `AWS_EC2_METADATA_SERVICE_ENDPOINT_MODE`\n- `AWS_REGION`, `AWS_DEFAULT_REGION`\n\nThis fixes authentication failures when subagents attempt to use EC2 instance profiles, ECS task roles, GCE metadata server credentials, or custom metadata endpoints.\n\n**Evidence**\n\nEnvironment forwarding list (search for `\"METADATA_SERVER_DETECTION\"` and `\"AWS_EC2_METADATA_SERVICE_ENDPOINT\"`)"}