save progress

offline/rules/secrets/sources/aws-secret-key.json

@@ -0,0 +1,17 @@
+{
+  "id": "stellaops.secrets.aws-secret-key",
+  "version": "1.0.0",
+  "name": "AWS Secret Access Key",
+  "description": "Detects AWS Secret Access Keys (40-character base64 strings near AWS context)",
+  "type": "regex",
+  "pattern": "(?i)(?:aws[_-]?secret[_-]?(?:access[_-]?)?key|secret[_-]?key)['\"]?\\s*[:=]\\s*['\"]?([A-Za-z0-9/+=]{40})['\"]?",
+  "severity": "critical",
+  "confidence": "high",
+  "keywords": ["aws_secret", "secret_key", "secret_access_key", "aws"],
+  "filePatterns": ["*.yml", "*.yaml", "*.json", "*.env", "*.properties", "*.tf", "*.tfvars", "*.config", "*.sh", "*.bash"],
+  "enabled": true,
+  "tags": ["aws", "cloud", "credentials"],
+  "references": [
+    "https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html"
+  ]
+}