CloudAws

AWS CLI SSO Cache

AWS CLI IAM Identity Center sign-in creates cached SSO token files that can grant temporary access while valid.

Metadata

id: cloud.aws.sso-cache
category: cloud
sensitivity: critical
subcategory: aws
artifact types: credential, token
tags: aws, sso, cloud

Path Matchers

Path	Kind	Platforms
`%USERPROFILE%\.aws\sso\cache\*.json`	`glob`	`windows`
`$HOME/.aws/sso/cache/*.json`	`glob`	`linux`, `macos`

Content Indicators

Literal strings:

accessToken
expiresAt

Credential Types

sso-token

Impact

cloud_access
credential_access

References

AWS CLI IAM Identity Center Authentication

AWS CLI Credentials

AWS CLI credential files may contain access keys, secret access keys, and temporary session tokens.

Azure CLI Authentication Artifacts

Azure CLI profile and token artifacts can contain authentication state and cloud account metadata.

On this page

Metadata Path Matchers Content Indicators Credential Types Impact References