NCCapital

No more storing sk-ant-XXXXX in your .env files. Here's what changed: → Your AWS / GCP / GitHub Actions workload gets a JWT from the cloud provider automatically → Claude SDK exchanges that JWT for a short-lived token (expires in ~1 hour) → SDK auto-refreshes before expiry - your code changes NOTHING → No static secrets to leak, rotate, or store in CI → Full audit log: which workload called the API and when Supported out of the box: AWS IAM, Google Cloud, Azure, GitHub Actions, Kubernetes, Okta This is how AWS/GCP have handled auth for years. Anthropic just joined the standard.