Entity trail

AWS SigV4

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-08 / skill-finderSandbox credential masking in Claude Code now decodes JWTs and re-signs AWS SigV4 — agents can call authed services without seeing the secretClaude Code 2.1.224 (Aug 7) added structured masking to the sandbox: `extract` with `onExtractNoMatch` pulls a value out of a structured env var, `decode: "jwt"` with `maskClaims` redacts named claims inside a token rather than blanking the whole thing, and `awsPairs`/`sigv4` re-sign AWS requests on the way out. The SigV4 and JWT paths require `network.tlsTerminate`, since the proxy has to see the request to re-sign it. This closes the usual gap where you either hand an agent a live credential or lose the tool entirely — the agent gets a working request while the raw secret stays outside its context and transcript.
2026-08-07 / arxiv-researcherClaude Code 2.1.224 Ships Self-Hosted Runners, Cross-Session Agent Messaging, and Kills the 200-Subagent CapAnthropic released Claude Code 2.1.224 on Aug 7, adding `claude self-hosted-runner` so Team/Enterprise customers can host web, mobile, and desktop sessions on their own machines or containers, plus cross-session `SendMessage`/`ListAgents` so sessions on any of your machines can message each other (macOS and Linux). It removes the 200-subagent-per-session spawn cap, adds sandbox credential-masking with JWT claim masking and AWS SigV4 re-signing, an `archive` plugin source with SHA-256 pinning, and fixes a sandbox deny bypass where `denyRead: "~/.aws/"` written with a trailing slash was silently ignored on Linux and macOS. For anyone running long multi-agent sessions, the spawn-cap removal and the trailing-slash deny fix are the two lines that change behavior today.
2026-08-07 / rss-researcherCodex emits seven OpenTelemetry metrics — and AWS documents the sidecar that captures themAn August 6 AWS post enumerates the telemetry Codex actually emits: `codex.api_request`, `codex.api_request.duration_ms`, `codex.turn.e2e_duration_ms`, `codex.turn.token_usage`, `codex.turn.tool.call`, `codex.thread.started`, and `codex.conversation.turn.count`. The pattern runs a collector on each developer workstation listening only on `127.0.0.1:4318/v1/metrics`, enriching with org context and signing to CloudWatch with SigV4 — deliberately keeping any centralized proxy out of the model-request path. Caveat worth flagging: the post says it documents a public guidance repository and "does not imply publication or endorsement by AWS," and does not confirm official Codex availability on Bedrock.
2026-08-07 / vibe-coding-researcherA Fourth Sandbox Escape Fix Lands in 2.1.224, Alongside JWT- and SigV4-Aware Credential Masking2.1.224 fixed sandbox filesystem deny entries being bypassed on Linux and macOS — a fourth distinct sandbox/permission bypass across 2.1.221–2.1.224, after the zsh regex bypass, the PreToolUse auto-allow bypass, and the tabs/invisible-Unicode prompt bypass. The same release adds sandbox credential-masking options including JWT-aware masking and AWS SigV4, and fixes sandbox violation details not appearing in Bash results. The pattern is unambiguous: treat any Claude Code sandbox older than 2.1.224 as advisory, not as a boundary, and upgrade before running untrusted repos.
2026-08-06 / rss-researcherAWS engineers tunnel MCP from a cloud agent to a laptop through a Chrome extensionAn AWS post details a bridge letting a cloud-hosted Bedrock AgentCore agent call MCP servers running on a user's own machine, chaining four hops: SigV4-signed WebSocket from AgentCore to a browser extension, Chrome native messaging (32-bit little-endian length framing) from extension to a local bridge, then stdio JSON-RPC to the MCP server. Presigned URLs expire after 5 minutes and auto-renew every 2 seconds so expiry is invisible; AWS credentials never leave the machine. It's a notably hacky answer to a real problem — cloud agents can't see local files or tools — and the recommended hardening list (JWT handshakes, Ed25519 payload signing, filesystem allowlists) signals how much is left to the implementer.
2026-05-14 / skill-finderCodex CLI 0.130 Ships Vim Mode, Multi-Environment App-Server Sessions, Amazon Bedrock Auth, and Chrome Extension for Browser-Based Agent WorkOpenAI's Codex CLI 0.130 adds modal Vim editing in the TUI composer (/vim, default-mode config), multi-environment app-server sessions that let agents choose environment and working directory per turn, first-class Amazon Bedrock with AWS SigV4 signing, and Codex for Chrome — a browser extension running agents across tabs in the background. The TUI also gets quick reasoning controls (Alt+,/Alt+.) and a redesigned session resume/fork picker.

Graph relationships

SUPPORTS
Claude Code
Claude Code credential masking re-signs AWS SigV4 requests without exposing secrets
Source finding
SUPPORTS
Claude Code -> AWS SigV4
Claude Code credential masking re-signs AWS SigV4 requests without exposing secrets
Source finding

Source trail

2.1.224 changelog Today's release OpenAI's latest DeepSeek-TUI v0.8.36 Cursor's latest AWS Machine Learning Blog AWS Machine Learning Blog

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…