Alibaba Cloud Keys

Description

General

• Documentation: https://www.alibabacloud.com/help/product/28625.htm

• Summary: Alibaba also known as Aliyun is a Chinese cloud computing company providing various services such as spinning up instance, object storage, etc... Its cloud keys enable to manage its services programmatically.

• IPs allowlist: A custom policy can be created to limit the access of resources for a RAM user to specific IP addresses.

• Scopes: Keys can be created for RAM user. A RAM user is an identity that represents a person or an application. RAM user can be granted permissions and the access keys attached to the user will inherit from the same permissions. RAM user also supports MFA for additional security.

Revoke the secret

The keys can be disabled and the access keys rotated.

Check for suspicious activity

Alibaba doesn't provide a way to check for suspicious activity.

Details for Alibaba Cloud Keys

• Family: credentials

• Category: cloud_provider

• Company: Alibaba Cloud

• High recall: True

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 12.06

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - lt[a6]i

Examples

- text: |
    $accessKeyId = "LTAIFTKZ5BhleEv7";
    $accessKeySecret = "6pbpC5bqTJ6aATHAd5434dq13XaEe7";
    $product = "Dysmsapi";
    $domain = "dysmsapi.aliyuncs.com";
  client_id: LTAIFTKZ5BhleEv7
  client_secret: 6pbpC5bqTJ6aATHAd5434dq13XaEe7

- text: |
    Aliyun::OSS::Base.establish_connection!(
      :access_key_id     => 'LTAIouVgukW3Kiv7',
      :secret_access_key => 'OjiCGBTxKuRjSZxAeCtCuT8d5VuAXV'
    )
  client_id: LTAIouVgukW3Kiv7
  client_secret: OjiCGBTxKuRjSZxAeCtCuT8d5VuAXV

- text: |
    Aliyun::OSS::Base.establish_connection!(
      :access_key_id     => 'LTAIx2g1F8gZe8SD',
      :secret_access_key => 'cVBxHKSh375El7pl90DfQD0Fo1GiPG'
    )
  client_id: LTAIx2g1F8gZe8SD
  client_secret: cVBxHKSh375El7pl90DfQD0Fo1GiPG

- text: |
    access_key_id = 'LTAI5tXXt9eF7t5YJQ1uxSxx'
    secret_access_key = 'cVBxHKSh375El7pl90DfQD0Fo1GiPG'
  client_id: LTAI5tXXt9eF7t5YJQ1uxSxx
  client_secret: cVBxHKSh375El7pl90DfQD0Fo1GiPG