// [CRUCIBLE-SEED]
// category: hardcoded_secret
// severity: critical
// language: java
// expected: Hardcoded AWS access key and secret key in source code

public class AwsClientFactory {
    private static final String AWS_ACCESS_KEY_ID     = "AKIAIOSFODNN7EXAMPLE";
    private static final String AWS_SECRET_ACCESS_KEY = "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY";
    private static final String AWS_REGION            = "us-east-1";

    public static software.amazon.awssdk.services.s3.S3Client buildS3Client() {
        software.amazon.awssdk.auth.credentials.AwsBasicCredentials creds =
            software.amazon.awssdk.auth.credentials.AwsBasicCredentials.create(
                AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY);
        return software.amazon.awssdk.services.s3.S3Client.builder()
            .credentialsProvider(
                software.amazon.awssdk.auth.credentials.StaticCredentialsProvider.create(creds))
            .region(software.amazon.awssdk.regions.Region.of(AWS_REGION))
            .build();
    }
}