18 lines
767 B
JSON
18 lines
767 B
JSON
{
|
|
"id": "stellaops.secrets.aws-secret-key",
|
|
"version": "1.0.0",
|
|
"name": "AWS Secret Access Key",
|
|
"description": "Detects AWS Secret Access Keys (40-character base64 strings near AWS context)",
|
|
"type": "regex",
|
|
"pattern": "(?i)(?:aws[_-]?secret[_-]?(?:access[_-]?)?key|secret[_-]?key)['\"]?\\s*[:=]\\s*['\"]?([A-Za-z0-9/+=]{40})['\"]?",
|
|
"severity": "critical",
|
|
"confidence": "high",
|
|
"keywords": ["aws_secret", "secret_key", "secret_access_key", "aws"],
|
|
"filePatterns": ["*.yml", "*.yaml", "*.json", "*.env", "*.properties", "*.tf", "*.tfvars", "*.config", "*.sh", "*.bash"],
|
|
"enabled": true,
|
|
"tags": ["aws", "cloud", "credentials"],
|
|
"references": [
|
|
"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html"
|
|
]
|
|
}
|