Trend Micro Conformity API Key

Description

General

• Documentation: https://cloudone.trendmicro.com/docs/conformity/
• Summary: Trend Micro Cloud One Conformity is an all-in-one security services platform for cloud-based applications. This detector catches the deprecated Conformity API keys. These keys can no longer be generated.
• IPs allowlist: API keys can be restricted to an approved list of IP addresses.
• Scopes: This feature is not available.

Revoke the secret

API keys can be disabled or deleted.

Check for suspicious activity

As of the time of writing this documentation, this feature is not available.

Details for Trendmicro conformity legacy apikey

• Family: Api

• Category: Other

• Company: Trend Micro

• High recall: False

• Validity check available: True

• On-premise instances exist: False

• Only valid secrets raise an alert: True

• Minimum number of matches: 1

• Occurrences found for one million commits: very rare

• Prefixed: False

• PreValidators:

- type: ContentWhitelistPreValidator
  patterns:
    - -api\.cloudconformity\.com

Examples

- text: |
    CONFORMITY_URL = "https://ap-south-1-api.cloudconformity.com/v1/accounts"
    CONFORMITY_KEY = "3YvVUE2c3GqVcaaTaetfnG2CYyou323xTGy5TxaVYYcvRQyXEFdu3Sxoo237Y4Kp"

  apikey: 3YvVUE2c3GqVcaaTaetfnG2CYyou323xTGy5TxaVYYcvRQyXEFdu3Sxoo237Y4Kp