From 613bc89f49a9aca26ae1a2cbed22648f994ffe81 Mon Sep 17 00:00:00 2001
From: Pankaj Telang <pankaj@stacklok.com>
Date: Wed, 11 Dec 2024 11:33:32 +0000
Subject: [PATCH] Add regex for detecting AWS secret access key

---
 signatures.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/signatures.yaml b/signatures.yaml
index bc9cf248..88b1c54d 100644
--- a/signatures.yaml
+++ b/signatures.yaml
@@ -1,6 +1,7 @@
 ---
 - Amazon:
   - Access Key: (?:A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA|ABIA|ACCA)[A-Z0-9]{16}
+  - Secret Access Key: (?<![A-Za-z0-9\/+])[A-Za-z0-9\/+=]{40}(?![A-Za-z0-9\/+=])
   # - Cognito User Pool ID: (?i)us-[a-z]{2,}-[a-z]{4,}-\d{1,}
   - RDS Password: (?i)(rds\-master\-password|db\-password)
   - SNS Confirmation URL: (?i)https:\/\/sns\.[a-z0-9-]+\.amazonaws\.com\/?Action=ConfirmSubscription&Token=[a-zA-Z0-9-=_]+