IBM API connect credentials

Description

General

Documentation: https://cloud.ibm.com/docs/apiconnect
Summary: IBM Cloud provides a large variety of managed cloud services. IBM API Connect is a end-to-end API management solution for creating and managing APIs located on cloud and on-premises. This detector finds the set of client_id and client_secret used by clients to authenticated to those APIs.
IPs allowlist: This feature is not mentioned in the documentation.
Scopes: The scopes are API specific.

Revoke the secret

Credentials can be revoked using the API Manager.

Check for suspicious activity

The monitoring and troubleshooting section of the documentation contains information on how to monitor suspicious activities.

Details for `Ibm api connect credentials`

Family: Api
Category: Cloud Provider
Company: IBM
High recall: False
Validity check available: False
Minimum number of matches: 2
Occurrences found for one million commits: 1.04
Prefixed: False
PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: true
- type: ContentWhitelistPreValidator
  patterns:
    - ibm
- type: ContentWhitelistPreValidator
  patterns:
    - id
- type: ContentWhitelistPreValidator
  patterns:
    - secret
- type: ContentWhitelistPreValidator
  patterns:
    - \bibm(cloud)?\b

Examples

- text: |
    'x-ibm-client-id': '2a1c6a12-99e9-4c15-bc12-8c1c0ac73c90',
    'x-ibm-client-secret': 'c50cC2rF0kW7eI7mK6bU7eC0yW7kV6dR3dK9sW0lT1fO5bM4j1',
  client_id: 2a1c6a12-99e9-4c15-bc12-8c1c0ac73c90
  client_secret: c50cC2rF0kW7eI7mK6bU7eC0yW7kV6dR3dK9sW0lT1fO5bM4j1