Skip to content

[Security Alert] Exposed API key(s) detected: AWS Access Key #63574

Closed

Description

@hdhdn

Hi,

An automated responsible-disclosure scan found pattern(s) matching the following API key type(s) in this file:

https://github.com/apache/airflow/blob/00dc4203e779ba889e3d6aa400967b23195b4280/providers/amazon/docs/connections/aws.rst

Keys detected

Recommended actions

  1. Revoke each key immediately using the links above
  2. Remove the key(s) from the file and commit the change
  3. Purge from git history — keys remain accessible in old commits even after deletion. Use git filter-repo or BFG Repo Cleaner
  4. Rotate any dependent services that used these credentials

This is an automated alert. No keys were tested, validated, or used in any way. If this is a false positive, please close this issue.


Sent by a responsible disclosure scanner to help protect accidentally exposed credentials.
Note: A .github/SECURITY.md was found in this repo — you may want to handle disclosure through that channel as well.

Activity

  1. boring-cyborg commented on Mar 14, 2026

    @boring-cyborg

    Thanks for opening your first issue here! Be sure to follow the issue template! If you are willing to raise PR to address this issue please do so, no need to wait for approval.

  2. added
    kind:bugThis is a clearly a bug
    securitySecurity issues that must be fixed
    on Mar 14, 2026
  3. rawwar commented on Mar 14, 2026

    @rawwar
    Contributor

    @hdhdn , those are examples and can be ignored. Its evident by the suffix of the values(they have EXAMPLEKEY" in them. So, i'll be closing this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind:bugThis is a clearly a bugprovider:amazonAWS/Amazon - related issuessecuritySecurity issues that must be fixed

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions