Skip to main content

IBM API connect credentials

Description#

General#

  • Documentation: https://cloud.ibm.com/docs/apiconnect
  • Summary: IBM Cloud provides a large variety of managed cloud services. IBM API Connect is a end-to-end API management solution for creating and managing APIs located on cloud and on-premises. This detector finds the set of client_id and client_secret used by clients to authenticated to those APIs.
  • IPs allowlist: This feature is not mentioned in the documentation.
  • Scopes: The scopes are API specific.

Revoke the secret#

Credentials can be revoked using the API Manager.

Check for suspicious activity#

The monitoring and troubleshooting section of the documentation contains information on how to monitor suspicious activities.

Details for Ibm api connect credentials#

  • Family: Api

  • Category: Cloud Provider

  • Company: IBM

  • High recall: False

  • Validity check available: False

  • Minimum number of matches: 2

  • Occurrences found for one million commits: 1.04

  • Prefixed: False

  • PreValidators:

- type: FilenameBanlistPreValidator  banlist_extensions: []  banlist_filenames: []  check_binaries: false  include_default_banlist_extensions: true  ban_markup: true- type: ContentWhitelistPreValidator  patterns:  - ibm- type: ContentWhitelistPreValidator  patterns:  - id- type: ContentWhitelistPreValidator  patterns:  - secret- type: ContentWhitelistPreValidator  patterns:  - \bibm(cloud)?\b

Examples#

- text: |    'x-ibm-client-id': '2a1c6a12-99e9-4c15-bc12-8c1c0ac73c90',    'x-ibm-client-secret': 'c50cC2rF0kW7eI7mK6bU7eC0yW7kV6dR3dK9sW0lT1fO5bM4j1',  client_id: 2a1c6a12-99e9-4c15-bc12-8c1c0ac73c90  client_secret: c50cC2rF0kW7eI7mK6bU7eC0yW7kV6dR3dK9sW0lT1fO5bM4j1