AWS SES Keys

Description

General

Documentation: https://docs.aws.amazon.com/ses/latest/dg/send-email-api.html
Summary: Amazon Web Services is a cloud provider. It provides computing and storage services. AWS SES (Simple Email Service) keys allow users to access the Amazon SES service and send any email to anyone.
IPs allowlist: It is possible to configure IP ranges that have access to AWS resources. See more info.
Scopes: The AWS IAM can be used to manage the permissions given to each user to Amazon SES. More details are availables at the Access management in Amazon SES documentation.

Revoke the secret

Sign in to the AWS Management Console then search Amazon SES in the search engine. Access the SMTP settings on the upper right. From this page one can create new credentials or manage the existing ones.

Check for suspicious activity

AWS CloudTrail is the service logging API calls. When enabled, the service delivers the log files to an S3 bucket.

Details for `Aws ses keys`

Family: Api
Category: Cloud Provider
Company: Amazon Web Services
High recall: True
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: False
Minimum number of matches: 2
Occurrences found for one million commits: 11.32
Prefixed: True
PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - akia[0-9a-z]{16}

Examples

- text: |
    "SmtpCredentials": {
    "Username": "AKIA2U3XFZXY5Y5K4YCG",
    "Password": "BEFlmwBBXP8fjfWBq1Rtc8JuJUVw9Go3nIC/uwchu/V4",
  client_id: AKIA2U3XFZXY5Y5K4YCG
  client_secret: BEFlmwBBXP8fjfWBq1Rtc8JuJUVw9Go3nIC/uwchu/V4

- text: |
    SMTP_USER=AKIA2EKLCMMJCE6KTO42
    SMTP_PASSWORD=BAj1i65sESqoX71jt/mN4nMyPMCfxY1CPWTvg9V9pHo5
    SMTP_SENDER=no-reply@example.com
  client_id: AKIA2EKLCMMJCE6KTO42
  client_secret: BAj1i65sESqoX71jt/mN4nMyPMCfxY1CPWTvg9V9pHo5

- text: |
    +IAM User Name,Smtp Username,Smtp Password
    +"ses-smtp-user.rsin",AKIA2QE4MQAW3TLKCZ7H,BAHD0HS9hMvbbalGT/S1bb2AIF6sRtstgLS8jw32+Xuu
  client_id: AKIA2QE4MQAW3TLKCZ7H
  client_secret: BAHD0HS9hMvbbalGT/S1bb2AIF6sRtstgLS8jw32+Xuu

- text: |
    +  <smtpAuthUsername>AKIA4ZGGVLAKOCUBSDDQ</smtpAuthUsername>
    +  <smtpAuthPassword>BE9eHyEHbdCkf65pBYDB/8Tz8NHxtIrk96vmNRfNJTiC</smtpAuthPassword>
    +  <smtpHost>email-smtp.eu-east-1.amazonaws.com</smtpHost>
  client_id: AKIA4ZGGVLAKOCUBSDDQ
  client_secret: BE9eHyEHbdCkf65pBYDB/8Tz8NHxtIrk96vmNRfNJTiC