# [CRUCIBLE-SEED]
# category: hardcoded_secret
# severity: critical
# language: ruby
# expected: Hardcoded AWS credentials in Ruby initializer

require 'aws-sdk-s3'

AWS_ACCESS_KEY = 'AKIAIOSFODNN7EXAMPLE1'
AWS_SECRET_KEY = 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY'
AWS_REGION     = 'us-east-1'
S3_BUCKET      = 'my-production-bucket'

Aws.config.update(
  region:      AWS_REGION,
  credentials: Aws::Credentials.new(AWS_ACCESS_KEY, AWS_SECRET_KEY)
)

def s3_client
  Aws::S3::Client.new(
    access_key_id:     AWS_ACCESS_KEY,
    secret_access_key: AWS_SECRET_KEY,
    region:            AWS_REGION
  )
end