How to identify the places IAM AWS access key used in Bamboo
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
Generally AWS Access keys can be found in these places like in Configuring Elastic Bamboo page and Shared Credentials . You may also use them in Build plans and Deployment Projects.
Solution
You can run the below SQL to find the keywords 'accessKey' or 'AKI%'
Select * from credentials where plugin_key like '%awsCredentials%';
SELECT build_id,
full_key,
build_type,
buildkey
FROM build
WHERE build_id IN (SELECT build_id
FROM PUBLIC.build_definition
WHERE xml_definition_data LIKE '%accessKey%')
SELECT deployment_project_id,
oid,
dp.description,
dp.NAME,
plan_key,
de.environment_id,
de.NAME,
de.xml_definition_data
FROM deployment_project dp
JOIN deployment_environment de
ON dp.deployment_project_id = de.package_definition_id
WHERE deployment_project_id IN (SELECT package_definition_id
FROM deployment_environment de
WHERE xml_definition_data LIKE '%AKI%')