diff --git a/tests/fixtures/arn.xml b/tests/fixtures/arn.xml
index b9ba3ec..e7fb223 100644
--- a/tests/fixtures/arn.xml
+++ b/tests/fixtures/arn.xml
@@ -5,8 +5,8 @@
arn:aws:kms:{REGION}:{ACCOUNT}:key/{KEY_ID}
- arn:aws:kms:eu-central-1:123456123456:key/hardcoded
- arn:aws:kms:ap-southeast-1:123456123456:key/hardcoded
- arn:aws:iam::123456123456:oidc-provider/auth-dev.mozilla.auth0.com
+ arn:aws:kms:eu-central-1:111122223333:key/hardcoded
+ arn:aws:kms:ap-southeast-1:111122223333:key/hardcoded
+ arn:aws:iam::111122223333:oidc-provider/auth-dev.mozilla.auth0.com
diff --git a/tests/fixtures/arn.yml b/tests/fixtures/arn.yml
index 71ec09e..dcb6bec 100644
--- a/tests/fixtures/arn.yml
+++ b/tests/fixtures/arn.yml
@@ -4,8 +4,8 @@ compliant:
noncompliant:
- arn01: arn:aws:kms:eu-central-1:123456123456:key/hardcoded
- arn02: arn:aws:kms:ap-southeast-1:123456123456:key/hardcoded
- arn03: arn:aws:iam::123456123456:oidc-provider/auth-dev.mozilla.auth0.com
+ arn01: arn:aws:kms:eu-central-1:111122223333:key/hardcoded
+ arn02: arn:aws:kms:ap-southeast-1:111122223333:key/hardcoded
+ arn03: arn:aws:iam::111122223333:oidc-provider/auth-dev.mozilla.auth0.com
arn_list:
- - arn:aws:kms:eu-central-1:123456123456:key/hardcoded
+ - arn:aws:kms:eu-central-1:111122223333:key/hardcoded
diff --git a/tests/fixtures/aws.json b/tests/fixtures/aws.json
index a80c575..3cf0fda 100644
--- a/tests/fixtures/aws.json
+++ b/tests/fixtures/aws.json
@@ -4,7 +4,7 @@
"aws_id": "{{ AWS ID }}",
"aws_key": "${AWS_KEY}",
"commit_id": "912ec803b2ce49e4a541068d495ab57000000000",
- "role": "arn:aws:iam::123456789000:role/role-name"
+ "role": "arn:aws:iam::111122223333:role/role-name"
},
{
"aws_account01": "000000000000",
@@ -18,7 +18,7 @@
"aws_token": "FakeYXdzELv//////////wEldj3948yOJRO84jgpoip239232hEOHhfkjhefkwue97jorhfiuh+XjFC9Je/YG7JCqKjrspab2lB+7/Fb1NJFjgwur47Dbhs/L7nh+/VGnwLoAo8CIqoPBLRmXItaoiuuofZnr+ktihZk1Yi55sYZ12hfRMPVbDmhf9Ke683+e9bJirhUEghw9424JOhgwrgqq99MvzCEFe4eXPOSgAcQcD2xqnnKO738tjhoh23HFqjflhefibWegfqefgqUF12hvgfwegqf"
},
{
- "aws_account01": "123456789123"
+ "aws_account01": "111122223333"
}
]
}
\ No newline at end of file
diff --git a/tests/fixtures/aws.xml b/tests/fixtures/aws.xml
index 6a17fbf..68562ff 100644
--- a/tests/fixtures/aws.xml
+++ b/tests/fixtures/aws.xml
@@ -4,7 +4,7 @@
{{ AWS ID }}
${AWS_KEY}
912ec803b2ce49e4a541068d495ab57000000000
- arn:aws:iam::123456789000:role/role-name
+ arn:aws:iam::111122223333:role/role-name
000000000000
111111111111
@@ -12,6 +12,6 @@
AKIAHI38FAKE1IWUQEEN
PA3XsxZ8d8cPQLmnZzFAKEdzC6ND2a8vhbyXU/Dw
FakeYXdzELv//////////wEldj3948yOJRO84jgpoip239232hEOHhfkjhefkwue97jorhfiuh+XjFC9Je/YG7JCqKjrspab2lB+7/Fb1NJFjgwur47Dbhs/L7nh+/VGnwLoAo8CIqoPBLRmXItaoiuuofZnr+ktihZk1Yi55sYZ12hfRMPVbDmhf9Ke683+e9bJirhUEghw9424JOhgwrgqq99MvzCEFe4eXPOSgAcQcD2xqnnKO738tjhoh23HFqjflhefibWegfqefgqUF12hvgfwegqf
- 123456789123
+ 111122223333
\ No newline at end of file
diff --git a/tests/fixtures/aws.yml b/tests/fixtures/aws.yml
index 0a32e8c..c609139 100644
--- a/tests/fixtures/aws.yml
+++ b/tests/fixtures/aws.yml
@@ -2,7 +2,7 @@ compliant:
aws_id: "{{ AWS ID }}"
aws_key: "${AWS_KEY}"
commit_id: 912ec803b2ce49e4a541068d495ab57000000000
- role: arn:aws:iam::123456789000:role/role-name
+ role: arn:aws:iam::111122223333:role/role-name
aws_account01: '000000000000'
aws_account02: '111111111111'
@@ -10,4 +10,4 @@ noncompliant:
aws_id: AKIAHI38FAKE1IWUQEEN
aws_key: PA3XsxZ8d8cPQLmnZzFAKEdzC6ND2a8vhbyXU/Dw
aws_token: FakeYXdzELv//////////wEldj3948yOJRO84jgpoip239232hEOHhfkjhefkwue97jorhfiuh+XjFC9Je/YG7JCqKjrspab2lB+7/Fb1NJFjgwur47Dbhs/L7nh+/VGnwLoAo8CIqoPBLRmXItaoiuuofZnr+ktihZk1Yi55sYZ12hfRMPVbDmhf9Ke683+e9bJirhUEghw9424JOhgwrgqq99MvzCEFe4eXPOSgAcQcD2xqnnKO738tjhoh23HFqjflhefibWegfqefgqUF12hvgfwegqf
- aws_account: '123456789123'
\ No newline at end of file
+ aws_account: '111122223333'
\ No newline at end of file
diff --git a/whispers/rules/keys.yml b/whispers/rules/keys.yml
index fb670e8..98453fa 100644
--- a/whispers/rules/keys.yml
+++ b/whispers/rules/keys.yml
@@ -56,7 +56,7 @@
regex: .*aws.*
ignorecase: False
value:
- regex: "^(?!.*\\s)(?!(.)\\1{11})[0-9]{12}$"
+ regex: "^(?!.*\\s)(?!(.)\\1{11})(?!.*1234.*)[0-9]{12}$"
ignorecase: False