Aller au contenu principal

AWS CodeArtifact Authorization Token

Description​

General​

  • Documentation: https://docs.aws.amazon.com/codeartifact/latest/ug/tokens-authentication.html
  • Summary: AWS CodeArtifact is a managed artifact repository for npm, PyPI, Maven, NuGet, SwiftPM, Cargo, Ruby and generic packages. It authenticates package manager requests against a CodeArtifact repository endpoint and grants, depending on the IAM permissions of the identity that created it, the right to read packages and to publish new package versions. Tokens are valid between 15 minutes and 12 hours, 12 hours by default.

Revoke the secret​

Authorization tokens cannot be revoked individually. Access has to be removed from the identity the token was issued for:

  1. If the token was created from temporary credentials (assumed role or federated user), deny access to those credentials.
  2. If the token was created from long-term IAM user credentials, change the user's policy to deny codeartifact actions, or delete the IAM user.

Details for AWS CodeArtifact Authorization Token​

  • Family: token

  • Category: package_registry

  • Company: Amazon Web Services

  • High recall: False

  • Validity check available: True

  • Analyzer available: False

  • Revoker available: False

  • On-premise instances exist: False

  • Only valid secrets raise an alert: False

  • Occurrences found for one million commits: 0.58

  • Prefixed: False