Skip to main content

bandit-aws

This is a Bandit plugin to scan for strings in your source code that look like AWS keys.

Usage

Bandit plugins are automatically activated once they are installed. To use this plugin, you simply need to install the plugin:

$ pip install bandit-aws

To verify the installation, display the bandit help text:

$ bandit --help

It will display a list of tests that were discovered and loaded. Verify that you see “C100 - hardcoded_aws_key” in the list.

You can then run bandit in the normal way. For example:

$ bandit -r myproject/

If any strings that look like AWS keys are found, they will be reported:

>> Issue: [C100:hardcoded_aws_key] Possible hardcoded AWS secret access key: 'JalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY'
   Severity: Medium   Confidence: Medium
   Location: myproject/example.py:11
   More Info: https://bandit.readthedocs.io/en/latest/plugins/c100_hardcoded_aws_key.html
10  AWS_ACCESS_KEY_ID = "AKIAIOSFODNN7EXAMPLE"
11  AWS_SECRET_ACCESS_KEY = "JalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY"
12
13
14  class MyClass:

Metadata

Release files for bandit-aws 0.0.20190812141212

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distribution (wheel)

Table of built distributions (wheels) for bandit-aws 0.0.20190812141212
File Interpreter ABI Platform
bandit_aws-0.0.20190812141212-py3-none-any.whl Python 3 none any Details

Release files / bandit_aws-0.0.20190812141212-py3-none-any.whl

Download URL bandit_aws-0.0.20190812141212-py3-none-any.whl
Size 4.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
b53bb27a6221dfb6e8799b36a5887c1dee371465cf1e4c041103766e9772624e
BLAKE2b-256 checksum
How to use checksums
0bd6a96a6f3daaa087d707d5465bf469d0ca5890550c74ef6c1f919e95665ea7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.12.1 pkginfo/1.4.2 requests/2.20.1 setuptools/40.6.2 requests-toolbelt/0.8.0 tqdm/4.28.1 CPython/3.7.1

Release history Release notifications | RSS feed

This release

0.0.20190812141212 This release

1 release file

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page