{"version":"2.1.321","anchor":"vault-style-credential-lookup-for-cloud-providers","canonical_anchor":"vault-style-credential-lookup-for-cloud-providers","heading":"Cloud provider sign-in checks a credential source before environment variables","tier":"notice","area":"Cloud Providers","scope":"org","heads_up":true,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321\/e\/vault-style-credential-lookup-for-cloud-providers","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.321","markdown":"### Cloud provider sign-in checks a credential source before environment variables\n\nBedrock, Mantle, Foundry and Vertex now look up a credential first and use it as a bearer token or API key before the usual sign-in\n\n**Unclear.** Where the credential lookup gets its values from, and so how you would supply one, is not clear.\n\n**What**\n\nWhen Claude Code runs through a cloud provider, it has to sign in to that provider. It now asks a credential lookup for each provider first, before using environment variables (settings passed to a program when it starts) or the default sign-in methods.\n\n- The lookup applies to `bedrock`, `mantle`, `foundry` and `vertex`.\n\n- If it finds a value, that value is used as the bearer token or API key, and the usual automatic sign-in is skipped.\n\n- If it finds nothing, Claude Code falls back to the environment variables `AWS_BEARER_TOKEN_BEDROCK` and `ANTHROPIC_FOUNDRY_API_KEY`, as before.\n\n- For Amazon Bedrock, both ways of building the connection now check this token source first. A found token is sent with `httpBearerAuth`. Otherwise, they fall back to sigv4 (AWS's request-signing method) or the AWS credential cache.\n\n**Why**\n\nTeams can now supply cloud provider credentials from a source other than environment variables or the standard AWS chain. The finding agents describe this as a vault-style credential store. If a credential is found there, it takes priority over the credentials you would otherwise sign in with.\n\n- Area: Cloud Providers\n- Names: `AWS_BEARER_TOKEN_BEDROCK`, `ANTHROPIC_FOUNDRY_API_KEY`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 3\/5\n- Scope: org\n- Heads-up: yes"}