AWS SES Keys

Description

General

• Documentation: https://docs.aws.amazon.com/ses/latest/dg/send-email-api.html
• Summary: Amazon Web Services is a cloud provider. It provides computing and storage services. AWS SES (Simple Email Service) keys allow users to access Amazon SES and send emails to anyone.
• IPs allowlist: It is possible to configure IP ranges that have access to AWS resources. See more info.
• Scopes: AWS IAM can be used to manage the permissions given to each user to Amazon SES. More details are available at the Access management in Amazon SES documentation.

Revoke the secret

Sign in to the AWS Management Console then search Amazon SES in the search engine. Access the SMTP settings on the upper right. From this page one can create new credentials or manage the existing ones.

Check for suspicious activity

AWS CloudTrail is the service logging API calls. When enabled, the service delivers the log files to an S3 bucket.

Details for AWS SES Keys

• Family: credentials

• Category: cloud_provider

• Company: Amazon Web Services

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 13.73

• Prefixed: True

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - akia[0-9a-z]{16}

Examples

- text: |
    "SmtpCredentials": {
    "Username": "AKIA2U3XFZXY5Y5K4YCG",
    "Password": "BEFlmwBBXP8fjfWBq1Rtc8JuJUVw9Go3nIC/uwchu/V4",
  client_id: AKIA2U3XFZXY5Y5K4YCG
  client_secret: BEFlmwBBXP8fjfWBq1Rtc8JuJUVw9Go3nIC/uwchu/V4

- text: |
    SMTP_USER=AKIA2EKLCMMJCE6KTO42
    SMTP_PASSWORD=BAj1i65sESqoX71jt/mN4nMyPMCfxY1CPWTvg9V9pHo5
    SMTP_SENDER=no-reply@example.com
  client_id: AKIA2EKLCMMJCE6KTO42
  client_secret: BAj1i65sESqoX71jt/mN4nMyPMCfxY1CPWTvg9V9pHo5

- text: |
    +IAM User Name,Smtp Username,Smtp Password
    +"ses-smtp-user.rsin",AKIA2QE4MQAW3TLKCZ7H,BAHD0HS9hMvbbalGT/S1bb2AIF6sRtstgLS8jw32+Xuu
  client_id: AKIA2QE4MQAW3TLKCZ7H
  client_secret: BAHD0HS9hMvbbalGT/S1bb2AIF6sRtstgLS8jw32+Xuu

- text: |
    +  <smtpAuthUsername>AKIA4ZGGVLAKOCUBSDDQ</smtpAuthUsername>
    +  <smtpAuthPassword>BE9eHyEHbdCkf65pBYDB/8Tz8NHxtIrk96vmNRfNJTiC</smtpAuthPassword>
    +  <smtpHost>email-smtp.eu-east-1.amazonaws.com</smtpHost>
  client_id: AKIA4ZGGVLAKOCUBSDDQ
  client_secret: BE9eHyEHbdCkf65pBYDB/8Tz8NHxtIrk96vmNRfNJTiC