Alibaba Cloud Keys

Description

General

• Documentation: https://www.alibabacloud.com/help/product/28625.htm
• Summary: Alibaba also known as Aliyun is a Chinese cloud computing company providing various services such as spinning up instance, object storage, etc... Its cloud keys enable to manage its services programmatically.

Revoke the secret

The keys can be disabled and the access keys rotated.

Details for Alibaba Cloud Keys

• Family: credentials

• Category: cloud_provider

• Company: Alibaba Cloud

• High recall: True

• Validity check available: True

• Analyzer available: True

• Revoker available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 12.06

• Prefixed: True

Secret Analyzer

Analysis Method

• Provider allows scopes enumeration: True
• Total network call count: 10
• Total call count may vary: True

HTTP Calls

Requests are designed to capture metadata and not to function effectively.

• GET: https://ram.aliyuncs.com/
• GET: https://sts.aliyuncs.com/

Other Calls

Non-HTTP queries or HTTP calls made through a third-party app (e.g., Python package). No other calls for this analyzer.