IBM COS HMAC Credentials

Description

General

Documentation: https://cloud.ibm.com/docs/cloud-object-storage
Summary: IBM Cloud provides a large variety of managed cloud services. The Cloud Object Storage service provides the data layer for IBM Cloud applications. HMAC credentials are used to access the Cloud Object Storage API. See this page for more info about IBM Cloud Object Storage credentials.
IPs allowlist: As of the time of writing this documentation, this feature is not yet supported.
Scopes: Scopes associated with each set of credentials can be tuned by selecting the Role associated with the credentials (see documentation.

Revoke the secret

HMAC credentials can be revoked:

in the "Service credentials" page, see documentation
from the API, see the documentation

Check for suspicious activity

IBM Cloud offers a managed service to detect suspicious activities among the account resources. See documentation for more details.

Details for `Ibm cos hmac credentials`

Family: Api
Category: Cloud Provider
Company: IBM
High recall: False
Validity check available: True
On-premise instances exist: False
Only valid secrets raise an alert: True
Minimum number of matches: 2
Occurrences found for one million commits: 4.42
Prefixed: False
PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: false
- type: ContentWhitelistPreValidator
  patterns:
    - ibm
    - appdomain\.cloud
    - mybluemix
- type: ContentWhitelistPreValidator
  patterns:
    - key
- type: ContentWhitelistPreValidator
  patterns:
    - secret

Examples

- text: |
    host = "something.cloud-object-storage.cloud.ibm.com"
    accessKeyId = "6df60a98c029135cb873d67ce725a12a"
    secretAccessKey = "aca12fd185fafde23f03a6e981122b0e25cf124f43fcb62f"
  client_id: 6df60a98c029135cb873d67ce725a12a
  client_secret: aca12fd185fafde23f03a6e981122b0e25cf124f43fcb62f
- text: host = "something.cloud-object-storage.cloud.ibm.com" accessKeyId = "6df60a98c029135cb873d67ce725a12a" secretAccessKey = "aca12fd185fafde23f03a6e981122b0e25cf124f43fcb62f"

  client_id: 6df60a98c029135cb873d67ce725a12a
  client_secret: aca12fd185fafde23f03a6e981122b0e25cf124f43fcb62f