[kyoung3412]

There are many IP's with exposed credentials, many of which are of either Oauth or RESTfull API. A regular check-up with developers need to be conducted. One little mistake such as set up errors can lead to credential leakage, causing catastrophic security damage to both individuals and businesses. However it's kind a serious problem that even Secret Access Key can be seen in the banner of Open Source Scanning tools.There are API Keys with "change" permission, so just one API Key leak can lead to credential leakge or manipulation. A regular check-up with developers need to be conducted to see whether they are caught up with the most recent cyber security tech.