From 7292c7998844f84927d98e93a0b35554f97eccb7 Mon Sep 17 00:00:00 2001 From: Dotta Date: Fri, 2 Oct 2026 16:11:35 -0500 Subject: [PATCH] Clarify Bedrock credential storage documentation Co-Authored-By: Paperclip --- doc/connections/AI-CONNECTIONS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/connections/AI-CONNECTIONS.md b/doc/connections/AI-CONNECTIONS.md index 02f947a7f23..5e1032c3daa 100644 --- a/doc/connections/AI-CONNECTIONS.md +++ b/doc/connections/AI-CONNECTIONS.md @@ -547,7 +547,7 @@ Vertex, ambient AWS identity, arbitrary authentication headers, and automatic provider catalog discovery are not part of this implementation. `config.ai.routing` stores only kind, protocol, URL, auth method, region, and -optional model IDs/labels. The vault stores keys or the AWS credential bundle. +optional model IDs/labels. The vault stores provider API keys, including Bedrock API keys. Fixed bindings contain only connection/grant identity. The server checks actual connection metadata, company, owner/audience, installation, status, and protocol before resolving secrets. Advanced connections cannot silently become native