Enable DEFAULT_API_KEYS via Docker Environment Variable

[CajuCLC]

Issue #, if available:
Issue 137: Pass DEFAULT_API_KEYS via Docker env

Description of changes:

• Modified api/settings.py to read DEFAULT_API_KEYS from the environment variable.
• Allows users to set DEFAULT_API_KEYS dynamically through Docker, providing enhanced flexibility for authentication configuration.

Example Docker command to run with custom API key:

docker run -d --name bedrock-gateway \
  -e AWS_ACCESS_KEY_ID=$AWS_ACCESS_KEY_ID \
  -e AWS_SECRET_ACCESS_KEY=$AWS_SECRET_ACCESS_KEY \
  -e AWS_SESSION_TOKEN=$AWS_SESSION_TOKEN \
  -e AWS_REGION=us-east-1 \
  -e DEFAULT_API_KEYS=your_custom_api_key \
  -p 8000:80 \
  bedrock-gateway

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[fabianx-ai]

Peer-Review: Looks great to me!

[zxkane]

It won't support the hardcoded key. Use the env variables for secrets or api key.

bedrock-access-gateway/src/api/auth.py

Lines 18 to 30 in b4800c5

	elif api_key_secret_arn:
	sm = boto3.client("secretsmanager")
	try:
	response = sm.get_secret_value(SecretId=api_key_secret_arn)
	if "SecretString" in response:
	secret = json.loads(response["SecretString"])
	api_key = secret["api_key"]
	except ClientError:
	raise RuntimeError("Unable to retrieve API KEY, please ensure the secret ARN is correct")
	except KeyError:
	raise RuntimeError('Please ensure the secret contains a "api_key" field')
	elif api_key_env:
	api_key = api_key_env

[CajuCLC]

It won't support the hardcoded key. Use the env variables for secrets or api key.

bedrock-access-gateway/src/api/auth.py

Lines 18 to 30 in b4800c5

	elif api_key_secret_arn:
	sm = boto3.client("secretsmanager")
	try:
	response = sm.get_secret_value(SecretId=api_key_secret_arn)
	if "SecretString" in response:
	secret = json.loads(response["SecretString"])
	api_key = secret["api_key"]
	except ClientError:
	raise RuntimeError("Unable to retrieve API KEY, please ensure the secret ARN is correct")
	except KeyError:
	raise RuntimeError('Please ensure the secret contains a "api_key" field')
	elif api_key_env:
	api_key = api_key_env

This is not for the secrets or api key. This is for the PASSWORD. But it seems someone removed it on another PR.