CloudAws

AWS CLI Credentials

AWS CLI credential files may contain access keys, secret access keys, and temporary session tokens.

Metadata

id: cloud.aws.credentials
category: cloud
sensitivity: critical
subcategory: aws
artifact types: credential, configuration
tags: aws, cloud, credentials

Path Matchers

Path	Kind	Platforms
`%USERPROFILE%\.aws\credentials`	`file`	`windows`
`$HOME/.aws/credentials`	`file`	`linux`, `macos`

Content Indicators

Literal strings:

aws_access_key_id
aws_secret_access_key
aws_session_token

Regular expressions:

(?i)aws_access_key_id\s*=
(?i)aws_secret_access_key\s*=

Credential Types

access-key
secret-access-key
session-token

Impact

cloud_access
credential_access

References

AWS CLI Configuration and Credential File Settings

AWS CLI Config

AWS CLI configuration files can reveal profiles, regions, output formats, role assumptions, and credential process settings.

AWS CLI SSO Cache

AWS CLI IAM Identity Center sign-in creates cached SSO token files that can grant temporary access while valid.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References