def log_credentials_compliant()

in src/python/detectors/aws_logged_credentials/aws_logged_credentials.py [0:0]

• 11 lines of code
• 1 McCabe index (conditional complexity)

def log_credentials_compliant():
    import boto3
    session = boto3.Session()
    credentials = session.get_credentials()
    credentials = credentials.get_frozen_credentials()
    access_key = credentials.access_key
    secret_key = credentials.secret_key
    # Compliant: avoids writing credentials to the logger.
    session = boto3.Session(
        aws_access_key_id=access_key,
        aws_secret_access_key=secret_key
    )