Skip to main content

bandit-aws

This is a Bandit plugin to scan for strings in your source code that look like AWS keys.

Usage

Bandit plugins are automatically activated once they are installed. To use this plugin, you simply need to install the plugin:

$ pip install bandit-aws

To verify the installation, display the bandit help text:

$ bandit --help

It will display a list of tests that were discovered and loaded. Verify that you see “C100 - hardcoded_aws_key” in the list.

You can then run bandit in the normal way. For example:

$ bandit -r myproject/

If any strings that look like AWS keys are found, they will be reported:

>> Issue: [C100:hardcoded_aws_key] Possible hardcoded AWS secret access key: 'JalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY'
   Severity: Medium   Confidence: Medium
   Location: myproject/example.py:11
   More Info: https://bandit.readthedocs.io/en/latest/plugins/c100_hardcoded_aws_key.html
10  AWS_ACCESS_KEY_ID = "AKIAIOSFODNN7EXAMPLE"
11  AWS_SECRET_ACCESS_KEY = "JalrXUtnFEMI/K7MDENG/bPxRfiCYzEXAMPLEKEY"
12
13
14  class MyClass:

Metadata

Release files for bandit-aws 0.0.20191107081015

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distribution (wheel)

Table of built distributions (wheels) for bandit-aws 0.0.20191107081015
File Interpreter ABI Platform
bandit_aws-0.0.20191107081015-py3-none-any.whl Python 3 none any Details

Release files / bandit_aws-0.0.20191107081015-py3-none-any.whl

Download URL bandit_aws-0.0.20191107081015-py3-none-any.whl
Size 4.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
7d958e9166d8cfcb4a3b3a3e89c664a3edc6757be233a0b1878925ff407763bd
BLAKE2b-256 checksum
How to use checksums
9a41bdc60a348e0e9e598334b8a4f04526b719bda9e7f61955b9635495596918
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.12.1 pkginfo/1.4.2 requests/2.20.1 setuptools/40.6.2 requests-toolbelt/0.8.0 tqdm/4.28.1 CPython/3.7.1

Release history Release notifications | RSS feed

This release

0.0.20191107081015 This release

1 release file

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page