Skip to main content

Alibaba Cloud Keys

Description#

General#

  • Documentation: https://www.alibabacloud.com/help/product/28625.htm

  • Summary: Alibaba also known as Aliyun is a Chinese cloud computing company providing various services such as spinning up instance, object storage, etc... Its cloud keys enable to manage its services programmatically.

  • IPs allowlist: A custom policy can be created to limit the access of resources for a RAM user to specific IP addresses.

  • Scopes: Keys can be created for RAM user. A RAM user is an identity that represents a person or an application. RAM user can be granted permissions and the access keys attach to the user will inherit from the same permissions. RAM user also supports MFA for additional security.

Revoke the secret#

The keys can be disabled and the access keys rotated.

Check for suspicious activity#

Alibaba doesn't provide a way to check for suspicious activity.

Details for Alibaba iam#

  • Category: Cloud Provider

  • Company: Alibaba Cloud

  • High recall: True

  • Validity check available: False

  • Minimum number of matches: 2

  • Occurrences found for one million commits: 9.64

  • Prefixed: True

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions:  - ^lock$  banlist_filenames: []  check_binaries: false- type: ContentWhitelistPreValidator  patterns:  - lt[a6]i

Examples#

- text: >    $accessKeyId = "LTAIFTKZ5BhleEv7";    $accessKeySecret = "5oaoB4apSI5fFSGZc4323cp02WzDd6";    $product = "Dysmsapi";    $domain = "dysmsapi.aliyuncs.com";  client_id: LTAIFTKZ5BhleEv7  client_secret: 5oaoB4apSI5fFSGZc4323cp02WzDd6
- text: >    Aliyun::OSS::Base.establish_connection!(      :access_key_id     => 'LTAIouVgukW3Kiv7',      :secret_access_key => 'OjiHGBIiKuRjSMxDeCtCuT8d2VrLZT'    )  client_id: LTAIouVgukW3Kiv7  client_secret: OjiHGBIiKuRjSMxDeCtCuT8d2VrLZT
- text: >    Aliyun::OSS::Base.establish_connection!(      :access_key_id     => 'LTAIx2g1F8gZe8SD',      :secret_access_key => 'cVJoHKSh375Al7il90DuQD7Fo3GiPG'    )  client_id: LTAIx2g1F8gZe8SD  client_secret: cVJoHKSh375Al7il90DuQD7Fo3GiPG
- text: >    access_key_id = 'LTAI5tXXt9eF7t5YJQ1uxSxx'    secret_access_key = 'cVJoHKSh375Al7il90DuQD7Fo3GiPG'  client_id: LTAI5tXXt9eF7t5YJQ1uxSxx  client_secret: cVJoHKSh375Al7il90DuQD7Fo3GiPG