Base64 AWS SES keys

Description

General

• Documentation: https://docs.aws.amazon.com/ses/latest/dg/send-email-api.html
• Summary: Amazon Web Services is a cloud provider. It provides computing and storage services. AWS SES (Simple Email Service) keys allow users to access Amazon SES and send emails to anyone.
• IPs allowlist: It is possible to configure IP ranges that have access to AWS resources. See more info.
• Scopes: AWS IAM can be used to manage the permissions given to each user to Amazon SES. More details are available at the Access management in Amazon SES documentation.

Revoke the secret

Sign in to the AWS Management Console then search Amazon SES in the search engine. Access the SMTP settings on the upper right. From this page one can create new credentials or manage the existing ones.

Check for suspicious activity

AWS CloudTrail is the service logging API calls. When enabled, the service delivers the log files to an S3 bucket.

Details for Base64 aws ses keys

• Family: credentials

• Category: cloud_provider

• Company: Amazon Web Services

• High recall: True

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 2

• Occurrences found for one million commits: 0.03

• Prefixed: True

• PreValidators:

- type: Base64ContentWhitelistPreValidator
  keywords:
    - AKIA

Examples

- text: |
    "SmtpCredentials": {
    "Username": "QUtJQTJVM1hGWlhZNVk1SzRZQ0c=",
    "Password": "QkVGbG13QkJYUDhmamZXQnExUnRjOEp1SlVWdzlHbzNuSUMvdXdjaHUvVjQ=",
  client_id: QUtJQTJVM1hGWlhZNVk1SzRZQ0c
  client_secret: QkVGbG13QkJYUDhmamZXQnExUnRjOEp1SlVWdzlHbzNuSUMvdXdjaHUvVjQ

- text: |
    +IAM User Name,Smtp Username,Smtp Password
    +"ses-smtp-user.rsin",QUtJQTJRRTRNUUFXM1RMS0NaN0g=,QkFIRDBIUzloTXZiYmFsR1QvUzFiYjJBSUY2c1J0c3RnTFM4anczMitYdXU=
  client_id: QUtJQTJRRTRNUUFXM1RMS0NaN0g
  client_secret: QkFIRDBIUzloTXZiYmFsR1QvUzFiYjJBSUY2c1J0c3RnTFM4anczMitYdXU