anth-security-basics

# Anthropic Security Basics ## Overview Security practices for Claude API integrations: API key management, input sanitization, prompt injection defense, and output validation. ## API Key Security ### Environment-Based Key Management ```bash # .env (NEVER commit) ANTHROPIC_API_KEY=sk-ant-api03-... # .gitignore .env .env.* !.env.example # .env.example (commit this) ANTHROPIC_API_KEY=sk-ant-api03-your-key-here ``` ### Key Rotation Procedure ```bash # 1. Generate new key at console.anthropic.com/settings/keys # 2. Deploy new key (zero-downtime: set both temporarily) export ANTHROPIC_API_KEY_NEW="sk-ant-api03-new..." # 3. Verify new key works python3 -c " import anthropic client = anthropic.Anthropic(api_key='$ANTHROPIC_API_KEY_NEW') msg = client.messages.create(model='claude-haiku-4-20250514', max_tokens=8, messages=[{'role':'user','content':'hi'}]) print('New key works:', msg.id) " # 4. Swap to new key export ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY_NEW" # 5. Revoke old key in Console ``` ### Workspace Key Isolation Use Anthropic Workspaces to isolate keys per team/environment: | Workspace | Purpose | Key Prefix | |-----------|---------|------------| | `dev` | Development/testing | `sk-ant-api03-dev-...` | | `staging` | Pre-production | `sk-ant-api03-stg-...` | | `production` | Live traffic | `sk-ant-api03-prd-...` | ## Prompt Injection Defense ```python import anthropic def safe_user_query(user_input: str, system_prompt: str) -> str: """Separate system instr...