Early Warning Detectors Using AWS Access Keys as Honeytokens
This should also be called "how to get your account locked by AWS in 15 minutes or less."<p>AWS is not fond of finding AWS keys laying around (limited permissions or otherwise). I once committed a key to a GitHub repo and AWS called me within 15 minutes. I've seen cases where they will then lock your account (preventing it from creating new EC2 resources) until the key is deleted.<p>Seriously, don't do this.<p>EDIT: as others have mentioned, private repos would be fine (and a good idea).