AWS says that for configured API-key routes the agent receives a placeholder token which the gateway replaces with the real secret, and the real secret never enters the agent's environment. Quote: "The real secret never enters the agent’s environment; the gateway attaches it on the way out."

The exact words it rests on

For configured API-key routes, the agent receives a placeholder token, which the gateway replaces with the real secret before forwarding a permitted request. The real secret never enters the agent’s environment; the gateway attaches it on the way out.

What the source said when we opened it, on 8 Oct 2026.

The source

Introducing Strands Box: AI agent sandboxes powered by Dogwood
Amazon Web Services · 2026-10-07

Open the sourcearchived copy

Checked

Checked by the notis newsroom on 8 Oct 2026, against the source above.

In the story

AWS launches open source Strands Box sandbox with action-level policy for agents 8 Oct 2026