Cloud Key Detectors

aws_access_key

Detects AWS access key IDs (AKIA followed by 16 base64 characters).

const redactor = createRedactor({
  rules: { aws_access_key: { action: "redact" } },
});

redactor.redact("Key: AKIAIOSFODNN7EXAMPLE");
// "Key: [AWS_ACCESS_KEY_1]"

• ID: aws_access_key
• Entity type: aws_access_key
• Context required: No
• Stream supported: Yes
• Validation: AKIA prefix + 16 base64 chars

google_api_key

Detects Google API keys (AIza followed by 35 base64 characters).

const redactor = createRedactor({
  rules: { google_api_key: { action: "redact" } },
});

redactor.redact("Key: AIzaSyDQ-vFl0X0X0X0X0X0X0X0X0X0X0X0X0X");
// "Key: [GOOGLE_API_KEY_1]"

• ID: google_api_key
• Entity type: google_api_key
• Context required: No
• Stream supported: Yes
• Validation: AIza prefix + 35 base64 chars

stripe_api_key

Detects Stripe API keys (sk_live_ or sk_test_ followed by alphanumeric characters).

const redactor = createRedactor({
  rules: { stripe_api_key: { action: "redact" } },
});

redactor.redact("Key: sk_live_abc123def456");
// "Key: [STRIPE_API_KEY_1]"

• ID: stripe_api_key
• Entity type: stripe_api_key
• Context required: No
• Stream supported: Yes
• Validation: sk_live_ or sk_test_ prefix + alphanumeric chars

slack_token

Detects Slack tokens (xoxb-, xoxp-, xoxa-, xoxr- followed by alphanumeric characters).

const redactor = createRedactor({
  rules: { slack_token: { action: "redact" } },
});

redactor.redact("Token: xoxb-1234567890-abcdef");
// "Token: [SLACK_TOKEN_1]"

• ID: slack_token
• Entity type: slack_token
• Context required: No
• Stream supported: Yes
• Validation: xoxb-/xoxp-/xoxa-/xoxr- prefix + alphanumeric chars

cloudflare_api_token

Detects Cloudflare API tokens (cfk_, cfut_, cfat_ followed by 20+ alphanumeric characters).

const redactor = createRedactor({
  rules: { cloudflare_api_token: { action: "redact" } },
});

redactor.redact("Token: cfk_abcdefghijklmnopqrstuvwxyz");
// "Token: [CLOUDFLARE_API_TOKEN_1]"

• ID: cloudflare_api_token
• Entity type: cloudflare_api_token
• Context required: No
• Stream supported: Yes
• Validation: cfk_/cfut_/cfat_ prefix + 20+ alphanumeric chars

digitalocean_token

Detects DigitalOcean API tokens (dop_v1_, doo_v1_, or dor_v1_ followed by 64 hex characters).

const redactor = createRedactor({
  rules: { digitalocean_token: { action: "redact" } },
});

redactor.redact(
  "Token: dop_v1_0000000000000000000000000000000000000000000000000000000000000000",
);
// "Token: [DIGITALOCEAN_TOKEN_1]"

• ID: digitalocean_token
• Entity type: digitalocean_token
• Context required: No
• Stream supported: Yes
• Validation: dop_v1_/doo_v1_/dor_v1_ prefix + 64 hex chars