# AWS KMS Signer Configuration
# Used by agentic-vault CLI and MCP server as fallback when --key-id/--region flags are omitted.
VAULT_KEY_ID=alias/my-signing-key
VAULT_REGION=us-east-1

# AWS Credentials (choose one method)
# Method 1: AWS SSO / IAM role (recommended — no env vars needed)
# Method 2: Static credentials
# AWS_ACCESS_KEY_ID=AKIA...
# AWS_SECRET_ACCESS_KEY=...
# AWS_SESSION_TOKEN=...
# Method 3: Named profile
# AWS_PROFILE=my-profile

# Testnet RPC (for integration tests only)
# SEPOLIA_RPC_URL=https://eth-sepolia.g.alchemy.com/v2/YOUR_API_KEY