RSA_Private_Key_uploaded_to_AWS_S3_AWS_Macie

Alert

RSA Private Key uploaded to AWS S3 (ALERT_CREATED)

SK4 unified event:
Connector/Service

AWS/Macie

SK4 Version:

2.3.105

Created Date:

Sun Feb 17 2019 13:18:35 GMT+0000 (Coordinated Universal Time)

Last Update:

Tue Jun 18 2019 11:11:49 GMT+0000 (Coordinated Universal Time)

Category

Security Alert

Description

An RSA Private Key has been uploaded to AWS S3. An RSA key is the private encryption key that is used to protect sensitive information. Please verify that the storage of credential material in this S3 bucket is in compliance with your organization's policies and that properly locked down access control mechanisms are in place to protect these credentials.

Search query

cef_vendor="skyformation" cef_name="security-threat-detected" destinationServiceName="AWS" sourceServiceName="aws.macie" proto="RSA Private Key uploaded to AWS S3"

Parsed CEF
Unparsed raw data

Expand to see an example...

Audit sources