Securityflags: g

AWS Access Key ID

Match AWS access key IDs (both long-term AKIA and temporary ASIA prefixes).

Available in

JavaScript / ECMAScript code

jsJavaScript

const re = new RegExp("\\b(?:AKIA|ASIA)[0-9A-Z]{16}\\b", "g");
const input = "AKIAIOSFODNN7EXAMPLE";
const matches = [...input.matchAll(re)];
console.log(matches.map(m => m[0]));

Uses `String.prototype.matchAll` for global iteration (Node 12+ / all modern browsers).

Python (re) code

pyPython

import re

pattern = re.compile(r"\b(?:AKIA|ASIA)[0-9A-Z]{16}\b")
input_text = "AKIAIOSFODNN7EXAMPLE"
for m in pattern.finditer(input_text):
    print(m.group(0))

Stdlib `re` module — no third-party dependency. Works on Python 3.6+.

Go (RE2) code

goGo

package main

import (
	"fmt"
	"regexp"
)

func main() {
	re := regexp.MustCompile(`\b(?:AKIA|ASIA)[0-9A-Z]{16}\b`)
	input := `AKIAIOSFODNN7EXAMPLE`
	for _, match := range re.FindAllString(input, -1) {
		fmt.Println(match)
	}
}

Uses `regexp.MustCompile` (panics on bad patterns at startup) and `FindAllString` for all matches.

Pattern

regexengine-agnostic

\b(?:AKIA|ASIA)[0-9A-Z]{16}\b   (flags: g)

Raw source: \b(?:AKIA|ASIA)[0-9A-Z]{16}\b

How it works

Starts with AKIA (long-term user key) or ASIA (short-term STS session key), followed by exactly 16 uppercase alphanumeric characters. Word boundaries prevent partial matches.