[aw] Dead-code Removal Rotation timed out

### Workflow Failure

**Workflow:** [Dead-code Removal Rotation](https://github.com/elastic/terraform-provider-elasticstack/blob/main/.github/workflows/ci-deadcode-removal-rotation.md)
**Branch:** main
**Run:** https://github.com/elastic/terraform-provider-elasticstack/actions/runs/34923007763

> [!WARNING]
> **Credential Authentication Failed**: The firewall audit log detected authentication rejections (HTTP 401/403) from AI provider APIs. The following provider credentials appear to be missing, expired, or invalid:

- Anthropic Claude (`ANTHROPIC_API_KEY`)

To resolve this:

1. Verify that the required API keys are configured as repository secrets
2. Confirm the secrets have not expired and are still valid
3. Check that the secret names in your workflow frontmatter match the configured repository secrets

For details on configuring engine credentials, see: [Engine Reference](https://github.github.com/gh-aw/reference/engines/)

**Agent Timed Out**: The agent job exceeded the maximum allowed execution time (20 minutes).

To increase the timeout, add or update the `timeout-minutes` setting in your workflow's frontmatter:

```yaml
---
timeout-minutes: 30
---
```

### Action Required

**Assign this issue to an agent** to debug and fix the issue.

Optimize token consumption

This failure was triggered by a guardrail limit (max-turns / timeout). Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.) to analyze token usage and reduce costs:

````
Optimize the agentic workflow token consumption using https://raw.githubusercontent.com/github/gh-aw/main/optimize.md

The workflow run is at https://github.com/elastic/terraform-provider-elasticstack/actions/runs/34923007763
````

Debug with any coding agent

Use this prompt with any coding agent (GitHub Copilot, Claude, Gemini, etc.):

````
Debug the agentic workflow failure using https://raw.githubusercontent.com/github/gh-aw/main/debug.md

The failed workflow run is at https://github.com/elastic/terraform-provider-elasticstack/actions/runs/34923007763
````

Manually invoke the agent

Debug this workflow failure using your favorite Agent CLI and the `agentic-workflows` prompt.

- Start your agent
- Load the `agentic-workflows` skill from `.github/skills/agentic-workflows/SKILL.md` or
- Type `debug the agentic workflow ci-deadcode-removal-rotation failure in https://github.com/elastic/terraform-provider-elasticstack/actions/runs/34923007763`

> [!TIP]
>
> Stop reporting this workflow as a failure
>
> To stop a workflow from creating failure issues, set `report-failure-as-issue: false` in its frontmatter:
> ```yaml
> safe-outputs:
> report-failure-as-issue: false
> ```
>
>

> Generated from [Dead-code Removal Rotation](https://github.com/elastic/terraform-provider-elasticstack/actions/runs/34923007763) · claude · 0.031 AIC · [◷](https://github.com/search?q=repo%3Aelastic%2Fterraform-provider-elasticstack+is%3Aissue+%22gh-aw-workflow-id%3A+ci-deadcode-removal-rotation%22&type=issues)
> - [x] expires on Sep 22, 2026, 3:26 AM UTC

Start with .github/workflows/ci-deadcode-removal-rotation.md and inspect the failed run linked in the issue. Check the workflow frontmatter and repository secrets for the reported ANTHROPIC_API_KEY authentication failure and timeout. Done means the workflow completes successfully without timing out or reporting the credential failure.

Written by the indexing model from the issue text.