feat(secret): more builtin aws rules (aquasecurity#489)

josedonizetti · Apr 24, 2022 · 0450560 · 0450560
1 parent f41fefd
commit 0450560
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/secret/builtin.go b/secret/builtin.go
@@ -73,6 +73,24 @@ var builtinRules = []Rule{
 		Regex:    MustCompile(`(A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16}`),
 		Keywords: []string{"AKIA", "AGPA", "AIDA", "AROA", "AIPA", "ANPA", "ANVA", "ASIA"},
 	},
+	{
+		ID:              "aws-secret-access-key",
+		Category:        CategoryAWS,
+		Severity:        "CRITICAL",
+		Title:           "AWS Secret Access Key",
+		Regex:           MustCompile(`(?i)["']?(aws)?_?(secret)?_?(access)?_?key["']?\s*(:|=>|=)\s*(?P<secret>["']?[A-Za-z0-9\/\+=]{40})["']?`),
+		SecretGroupName: "secret",
+		Keywords:        []string{"key"},
+	},
+	{
+		ID:              "aws-account-id",
+		Category:        CategoryAWS,
+		Severity:        "HIGH",
+		Title:           "AWS Account ID",
+		Regex:           MustCompile(`(?i)["']?(aws)?_?account_?(id)?["']?\s*(:|=>|=)\s*['"]?(?P<secret>[0-9]{4}\-?[0-9]{4}\-?[0-9]{4})['"]?`),
+		SecretGroupName: "secret",
+		Keywords:        []string{"account"},
+	},
 	{
 		ID:       "github-pat",
 		Category: CategoryGitHub,