[Bug] Unnecessary Claude error when secret not explicitly passed

[sroy-forr]

Description

AWS credentials are used from env variables. It's not necessary to pass them as a param, although good to have. There's no point throwing an error when it's not explicitly passed, while everything is working without it.

agno/libs/agno/agno/models/aws/claude.py

Line 84 in 03dd821

"AWS credentials not found. Please either set the AWS_BEDROCK_API_KEY or AWS_ACCESS_KEY and AWS_SECRET_KEY environment variables."

Steps to Reproduce

from agno.models.aws import Claude
instance = Claude(
            id=id,
            max_tokens=max_tokens,
            temperature=temp,
        )

AWS secret and access variables are marked as Optional but still throws this error. Credentials are generally used through env variables.

ERROR    AWS credentials not found. Please either set the AWS_BEDROCK_API_KEY or AWS_ACCESS_KEY and AWS_SECRET_KEY environment variables.

Agent Configuration (if applicable)

No response

Expected Behavior

If we are using an env, we need not pass AWS secret keys explicitly. It is working but unnecessarily throwing an error.

Below image shows an error but the connection is successful. It's asking me to pass secrets explicitly.

Actual Behavior

Throwing this error while everything is working fine through env variables.

Screenshots or Logs (if applicable)

No response

Environment

Agno 2.2.7

Possible Solutions (optional)

No response

Additional Context

No response

[dirkbrnd]

@sroy-forr are you not exporting any keys as environment variables? What do you mean if you say your are using an env?

[sroy-forr]

Here is the entire code to replicate the issue. The keys are in .env file and I load them using dotenv. I have never passed them as a parameter to Claude.

My issue is this code still works fine, but says I have an error while there is none. The issue wasn't there in earlier releases.
There is NO ERROR as such, but the logs says I do. This is happening because the team added this "check if the secrets are passed as params, if not raise this error". It always worked with dotenv, never had to pass them as params which are still Optional.

import asyncio
from dotenv import load_dotenv
from agno.agent import Agent
from agno.models.aws import Claude
from agno.utils.log import log_info


load_dotenv()

instance = Claude(
    id="us.anthropic.claude-haiku-4-5-20251001-v1:0",
    max_tokens=4096,
    temperature=0.0,  # Secret keys are optional
)

agent = Agent(
    model=instance,
)


async def run_agent():
    run_response = agent.arun(
        "tell me a short story for a 5 year old", stream=True, stream_events=True
    )

    async for event in run_response:
        log_info(event)


# Run the workflow
if __name__ == "__main__":
    asyncio.run(run_agent())

[dirkbrnd]

Ah I found the mistake. The if was just incorrect on our side.

To just make double sure, you set the AWS_BEDROCK_API_KEY in your .env file? If not that, which ones do you set specifically?
I completely agree it isn't necessary to pass secrets manually.

[sroy-forr]

Here is my .env file.

AWS_REGION=
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_SESSION_TOKEN=

Thank you!