@@ -758,6 +758,7 @@ patterns:
758758 data : |
759759 AWS_ACCESS_KEY_ID=AKIAIOSFODNN7AAAAAAA
760760 start_offset : 18
761+ end_offset : 38
761762 comments :
762763 - " This rule detects AWS Key IDs without any attempt to pair them with a secret key."
763764 - " This adds to the risk of false positives, so we exclude any Key IDs that end with 'EXAMPLE' which are often used in documentation and sample code."
@@ -776,6 +777,8 @@ patterns:
776777 test :
777778 data : |
778779 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJQQJ99AAAC0123456789AAA012345678
780+ start_offset : 0
781+ end_offset : 84
779782 comments :
780783 - " This is an imprecise detection for Azure keys that does not identify which Azure service the key is for."
781784 - " Prefer using built-in more-specific rules for Azure services where possible."
@@ -795,6 +798,7 @@ patterns:
795798 data : |
796799 Ocp-Apim-Subscription-Key=0123456789abcdef0123456789abcdef
797800 start_offset : 26
801+ end_offset : 58
798802 comments :
799803 - " This is an imprecise detection for Azure keys that does not identify which Azure service the key is for."
800804 - " The key lacks internal identifiable features, which are used in modern keys issued by these Azure services."
@@ -813,6 +817,7 @@ patterns:
813817 data : |
814818 BedrockApiKey=ABSKQmVkcm9ja0FQSUtleSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
815819 start_offset : 14
820+ end_offset : 82
816821 comments :
817822 - " AWS Bedrock API Keys start with the prefix 'ABSKQmVkcm9ja0FQSUtleS' followed by a base64-encoded string."
818823 - " Matches AWS Bedrock keys that have an auto-generated 'BedrockAPIKey-' username."
@@ -833,6 +838,7 @@ patterns:
833838 data : |
834839 bedrock_api_key: ABSKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
835840 start_offset : 17
841+ end_offset : 189
836842 comments :
837843 - " AWS Bedrock API Keys start with the prefix 'ABSK' followed by a base64-encoded string."
838844 - " This rule matches an alternative format of AWS Bedrock API Keys that do not have the auto-generated 'BedrockAPIKey-' username."
0 commit comments