rspec/rules/S6290/description.adoc
2021-09-07 15:32:30 +02:00

9 lines
544 B
Plaintext

AWS credentials are designed to authenticate and authorize requests to AWS.
If your application interacts with AWS then it requires AWS credentials to access all the resources it needs to function properly. Resources that can be accessed depend on the permission granted to the AWS account. These credentials may authenticate to the AWS account root user who has unrestricted access to all resources in your AWS account, including billing information.
This rule flags instances of:
* AWS Secret Access Key
* AWS Access ID
* AWS Session Token