---
id: "aws_secret_access_key"
kind: "datatype"
status: "draft"
is_pii: false
categories: ["secrets"]
langs: ["common"]
quality: 75
url: "http://registry.apicrafter.io/datatype/aws_secret_access_key"
---

# AWS secret access key (`aws_secret_access_key`)

> **Draft.** Draft records have not been reviewed yet and may be incomplete or wrong; do not treat them as authoritative for legal or compliance decisions.

Secret part of an Amazon Web Services access key pair, used with the access key ID to sign API requests (for example to Amazon S3): 40 letters, digits, slashes or plus signs.

- Personal data (PII): no
- Categories: Secrets and credentials (passwords, keys, tokens) (secrets)
- Countries: global
- Languages: Common to most languages (common)

## Detection

Regular expression (Python `re`):

```
^[A-Za-z0-9/+]{40}$
```

## Mappings

- purview: `Amazon S3 client secret access key`, `All Credential Types`, `All credentials`

## Supported by tools

- `amazonmacie`
- `awscomprehend`
- `detectsecrets`
- `microsoftpurview`
- `semgrep`
- `trufflehog`

## Sources

- doc: <https://learn.microsoft.com/en-us/purview/sit-defn-amazon-s3-client-secret-access-key>
- doc: <https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html>

## Quality

Score 75/100. Missing: examples, negative example, translation.

JSON: <http://registry.apicrafter.io/api/v1/datatypes/aws_secret_access_key.json> · Edit: <https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/aws_secret_access_key.yaml>