# Infosys leaked FullAdminAccess AWS keys on PyPi for over a year | Tom Forbes

<https://tomforb.es/infosys-leaked-fulladminaccess-aws-keys-on-pypi-for-over-a-year/>

- Host: [tomforb.es](https://links.thingelstad.xyz/hosts/tomforb.es/)
- Saved: November 22, 2022 (2022-11-23T00:56:18Z)
- Record: https://links.thingelstad.xyz/links/649e609ddd9a/
- JSON: https://links.thingelstad.xyz/links/649e609ddd9a.json

## What Jamie wrote

Leaked credentials to cloud services is a huge problem, and it is so easy to make. This is wild that this was publicly exposed for a year!

> At the top of the file, embedded as string constants, was an AWS access key and AWS secret key. The rest of the code seemed to be interacting with a S3 bucket in pretty standard ways: pulling data, loading it into pandas and computing some basic aggregates. It seems like this code came from an internal Github instance inside Infosys and was accidentally published.
> 
> I assumed the key had been revoked (it’s been public for over a year!), but to my great surprise I found it was still active!

😳

## Facts

- Kind: [Page](https://links.thingelstad.xyz/kinds/page/)

## Appears in

- [WT235: Weekly Thing #235 / TikTok, Busy, Stories](https://weekly.thingelstad.com/archive/235/), Notable

## Same host

- [I scanned every package on PyPi and found 57 live AWS keys | Tom Forbes](https://links.thingelstad.xyz/links/cfe3e0ae1f48/) (tomforb.es, January 12, 2023)

## Saved the same week

- [Twitter. | Irrational Exuberance](https://links.thingelstad.xyz/links/f22b23d27380/) (lethain.com, November 22, 2022)
- [Taylor Swift | The Eras Tour Onsale Explained - Ticketmaster](https://links.thingelstad.xyz/links/fd90cedac535/) (business.ticketmaster.com, November 22, 2022)
- [The Seven Levels of Busy – Rands in Repose](https://links.thingelstad.xyz/links/146f018fa1dc/) (randsinrepose.com, November 22, 2022)
- [FBI director says he's 'extremely concerned' about China's ability to weaponize TikTok - CyberScoop](https://links.thingelstad.xyz/links/00d38a4ac203/) (cyberscoop.com, November 22, 2022)
- [How China Got Our Kids Hooked on ‘Digital Fentanyl’](https://links.thingelstad.xyz/links/5b44b79ab29b/) (commonsense.news, November 22, 2022)

## Elsewhere

- Wayback Machine: https://web.archive.org/web/*/https://tomforb.es/infosys-leaked-fulladminaccess-aws-keys-on-pypi-for-over-a-year/