HTTP Clients

PyBoto3

boto3 is the AWS SDK for Python. client('s3').get_object(...) and similar operations commonly ingest user input into bucket / key names — SSRF-like vectors through S3 URLs and IAM misconfiguration. Covering for rule writers that check AWS-specific patterns.

Other Methods

.client()Neutral
#
Signature
boto3.client(service_name, region_name=None, ...) -> BaseClient

Creates a service client.

.resource()Neutral
#
Signature
boto3.resource(service_name, region_name=None, ...) -> ServiceResource

Creates a higher-level resource client.

Fully-Qualified Names

FQNField
boto3fqns[0]

Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.

Import

rule.py
from codepathfinder.go_rule import PyBoto3