News
Anthropic Hardens Claude Code With Workload Identity Federation and Sandbox Credential Blocking
Recent Claude Code releases (through v2.1.187) add sandbox credential blocking, org-level model restrictions, more reliable structured output and remote MCP, and improved session resume — alongside Anthropic's new Workload Identity Federation (WIF), which replaces static API keys with short-lived, scoped credentials issued per request via existing identities (AWS IAM roles, GCP/Kubernetes service accounts, GitHub Actions tokens, Okta/OIDC). For builders running Claude in automation, WIF removes the 'static key to rotate or leak' problem entirely. The cadence shows how fast Anthropic is hardening Claude Code for production and enterprise use.
↳ Follow the thread