aws

package

v1.8.0 Latest Latest Go to latest Published: Aug 11, 2026 License: MIT Imports: 13 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/HodeTech/leakwatch

Links

Open Source Insights

Documentation ¶

Overview ¶

Package aws provides a verifier for AWS Access Key credentials. It uses AWS STS GetCallerIdentity to check whether a key pair is active.

Index ¶

type Verifier

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Verifier ¶

type Verifier struct {
	// contains filtered or unexported fields
}

Verifier checks whether an AWS access key pair is active by calling STS GetCallerIdentity. It NEVER logs or persists raw key values.

func (*Verifier) Type ¶

func (v *Verifier) Type() string

Type returns the detector ID this verifier handles.

func (*Verifier) VerificationRequestBudget ¶ added in v1.8.0

func (v *Verifier) VerificationRequestBudget() int

VerificationRequestBudget declares the single STS probe this verifier can issue for a complete key pair.

func (*Verifier) Verify ¶

func (v *Verifier) Verify(ctx context.Context, raw detector.RawFinding) finding.VerificationResult

Verify checks if the detected AWS access key is valid/active. Raw contains the Access Key ID and RawV2 contains the Secret Access Key. Both are required for verification.

func (*Verifier) VerifyWithRequestGate ¶ added in v1.8.0

func (v *Verifier) VerifyWithRequestGate(
	ctx context.Context,
	raw detector.RawFinding,
	gate verifier.RequestGate,
) finding.VerificationResult

VerifyWithRequestGate admits the STS request at its actual SDK send point.

Source Files ¶

View all Source files

aws_verifier.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL