ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modify rule S6263: Add info about scope of rule and correct upper-case tag to be lower-case. (#1078)

Browse Source 
* Add info about the scope of the rule and correct the upper-case tag to be lower-case.
* Improve grammar and spelling
This commit is contained in:
Johann Beleites 2022-06-28 16:58:48 +02:00 committed by GitHub
parent 97b8411e55
commit a203cccf9e
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rules/S6263/java/message.adoc
View File

@ -1,4 +1,4 @@
=== Message
Make sure using a Long-term access key is safe here.
Make sure using a long-term access key is safe here.

4
rules/S6263/java/metadata.json
View File

@ -1,5 +1,5 @@
{
"title": "Using Long-term access keys are security-sensitive",
"title": "Using long-term access keys is security-sensitive",
"type": "SECURITY_HOTSPOT",
"status": "ready",
"remediation": {
@ -7,7 +7,7 @@
"constantCost": "1h"
},
"tags": [
"AWS"
"aws"
],
"extra": {
"replacementRules": [

5
rules/S6263/java/rule.adoc
View File

@ -1,5 +1,6 @@
In AWS, Long-term access keys will be valid until you manually revoke them. This makes them highly sensitive as any exposure can have serious consequences and should be used with care.
In AWS, long-term access keys will be valid until you manually revoke them. This makes them highly sensitive as any exposure can have serious consequences and should be used with care.
This rule will trigger when encountering an instantiation of `com.amazonaws.auth.BasicAWSCredentials`.
== Ask Yourself Whether
@ -8,7 +9,7 @@ In AWS, Long-term access keys will be valid until you manually revoke them. This
* The access keys need to be embedded within a mobile application.
* Existing identity providers (SAML 2.0, on-premises identity store) already exists.
For more information, see https://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.html#use-roles[Use IAM roles instead of Long-term access keys].
For more information, see https://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.html#use-roles[Use IAM roles instead of long-term access keys].
There is a risk if you answered yes to any of those questions.