sw_bucket.yar

rule sw_bucket
{
    meta:
        author = "@KevTheHermit"
        info = "Part of PasteHunter"
        reference = "https://github.com/kevthehermit/PasteHunter"

    strings:
        $a1 = "s3.amazonaws.com" ascii

    condition:
        any of them



}