# Review Cloud Identity Switches

Review Cloud Identity Switches: what it does, its label on each agent, what it misses, and examples.

Catalog policy ask-credential-switching, version 0.0.5, labelled blocks on Claude Code.

> Ask the user before running any command on this page: each one changes how their agent or repository behaves.

## What it does

Best effort, ask only. Asks a person before a shell command switches the identity later commands act as: aws --profile, AWS_PROFILE= or AWS keys (also $env:), sts assume-role, configure set of a key; gcloud account, configuration, login or impersonation; az account set, az login as a principal or identity; kubectl use-context or set-credentials; writes to ~/.aws, ~/.config/gcloud, ~/.azure. Names in .chock/credential-allowlist.json pass. Misses: scripts, SDKs, env files, credential_process.

## On each agent

| Agent | Label | What it does there |
| --- | --- | --- |
| Claude Code | Blocks | Refuses a matched shell command before it runs |
| Cursor | Asks | Asks before a matched shell command runs |
| Codex | Advisory | Not enforced (this client cannot prompt before a shell command) |
| GitHub Copilot | Asks | Asks before a matched shell command runs in VS Code. Not enforced in Copilot CLI, because it cannot prompt there. If the hook errors, the action goes through (not witnessed; the vendor's row is only partly live-run) |
| Devin | Advisory | Not enforced (this client cannot prompt before a shell command) |
| Grok | Not graded | Not graded yet for Grok |
| goose | Not graded | Not graded yet for goose |
| Antigravity | Not graded | Not graded yet for Antigravity |
| OpenHands | Not graded | Not graded yet for OpenHands |
| Kimi Code | Not graded | Not graded yet for Kimi Code |
| Factory Droid | Not graded | Not graded yet for Factory Droid |

## What it misses

Scripts, SDKs, env files, credential_process.

## Examples from its eval suite

Asks: A request lists a bucket as another AWS profile.

`aws s3 ls --profile prod`

Allowed: A request lists a bucket with the default identity.

`aws s3 ls`

## More

- [The policy on the catalog pages](https://chock.sh/coding/policies/ask-credential-switching/)
- [Source at the pinned catalog commit](https://github.com/open-coder-ai/chock-catalog/tree/1e60d211c1bb767152c6ab0167932da06ab3a10f/base/ask-credential-switching)


---

Built from engine [5a4b6287a46e](https://github.com/open-coder-ai/chock/commit/5a4b6287a46e07f9f856d9bbe10622bd1ff2e021) and catalog [1e60d211c1bb](https://github.com/open-coder-ai/chock-catalog/commit/1e60d211c1bb767152c6ab0167932da06ab3a10f).