- name: akeyless-delete-item
pattern: '(?i)(akeyless|aky)\s+delete-item\b'
severity: block
message: "Akeyless delete-item — permanently destroys a secret/key"
category: akeyless
test_block: "akeyless delete-item --name /my/secret"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-items
pattern: '(?i)(akeyless|aky)\s+delete-items\b'
severity: block
message: "Akeyless delete-items — batch secret deletion"
category: akeyless
test_block: "akeyless delete-items --path /old-secrets"
test_allow: "akeyless list-items --path /"
- name: akeyless-dynamic-secret-delete
pattern: '(?i)(akeyless|aky)\s+dynamic-secret-delete\b'
severity: block
message: "Akeyless dynamic-secret-delete — removes dynamic secret producer"
category: akeyless
test_block: "akeyless dynamic-secret-delete --name /my/producer"
test_allow: "akeyless list-items --path /"
- name: akeyless-rotated-secret-delete
pattern: '(?i)(akeyless|aky)\s+rotated-secret-delete\b'
severity: block
message: "Akeyless rotated-secret-delete — removes rotated secret"
category: akeyless
test_block: "akeyless rotated-secret-delete --name /my/rotated"
test_allow: "akeyless list-items --path /"
- name: akeyless-static-secret-delete-sync
pattern: '(?i)(akeyless|aky)\s+static-secret-delete-sync\b'
severity: block
message: "Akeyless static-secret-delete-sync — removes sync configuration"
category: akeyless
test_block: "akeyless static-secret-delete-sync --name /my/sync"
test_allow: "akeyless list-items --path /"
- name: akeyless-folder-delete
pattern: '(?i)(akeyless|aky)\s+folder-delete\b'
severity: block
message: "Akeyless folder-delete — removes folder and potentially nested items"
category: akeyless
test_block: "akeyless folder-delete --path /old-folder"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-auth-method
pattern: '(?i)(akeyless|aky)\s+delete-auth-method\b'
severity: block
message: "Akeyless delete-auth-method — removes authentication method"
category: akeyless
test_block: "akeyless delete-auth-method --name /my/auth"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-auth-methods
pattern: '(?i)(akeyless|aky)\s+delete-auth-methods\b'
severity: block
message: "Akeyless delete-auth-methods — batch auth method deletion"
category: akeyless
test_block: "akeyless delete-auth-methods --path /old-auth"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-role
pattern: '(?i)(akeyless|aky)\s+delete-role\b'
severity: block
message: "Akeyless delete-role — removes RBAC role"
category: akeyless
test_block: "akeyless delete-role --name /my/role"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-roles
pattern: '(?i)(akeyless|aky)\s+delete-roles\b'
severity: block
message: "Akeyless delete-roles — batch role deletion"
category: akeyless
test_block: "akeyless delete-roles --path /old-roles"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-role-association
pattern: '(?i)(akeyless|aky)\s+delete-role-association\b'
severity: block
message: "Akeyless delete-role-association — removes auth↔role binding"
category: akeyless
test_block: "akeyless delete-role-association --assoc-id my-assoc"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-role-rule
pattern: '(?i)(akeyless|aky)\s+delete-role-rule\b'
severity: warn
message: "Akeyless delete-role-rule — removes access rule from role"
category: akeyless
test_block: "akeyless delete-role-rule --role-name /my/role --path /secrets"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-group
pattern: '(?i)(akeyless|aky)\s+delete-group\b'
severity: block
message: "Akeyless delete-group — removes access group"
category: akeyless
test_block: "akeyless delete-group --name my-group"
test_allow: "akeyless list-items --path /"
- name: akeyless-policies-delete
pattern: '(?i)(akeyless|aky)\s+policies-delete\b'
severity: block
message: "Akeyless policies-delete — removes security policy"
category: akeyless
test_block: "akeyless policies-delete --name my-policy"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-target
pattern: '(?i)(akeyless|aky)\s+delete-target\b'
severity: block
message: "Akeyless delete-target — removes target integration"
category: akeyless
test_block: "akeyless delete-target --name /my/target"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-targets
pattern: '(?i)(akeyless|aky)\s+delete-targets\b'
severity: block
message: "Akeyless delete-targets — batch target deletion"
category: akeyless
test_block: "akeyless delete-targets --path /old-targets"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-target-association
pattern: '(?i)(akeyless|aky)\s+delete-target-association\b'
severity: warn
message: "Akeyless delete-target-association — removes item↔target binding"
category: akeyless
test_block: "akeyless delete-target-association --assoc-id my-assoc"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-gw-cluster
pattern: '(?i)(akeyless|aky)\s+delete-gw-cluster\b'
severity: block
message: "Akeyless delete-gw-cluster — removes entire gateway cluster"
category: akeyless
test_block: "akeyless delete-gw-cluster --cluster-name my-gw"
test_allow: "akeyless list-items --path /"
- name: akeyless-gateway-delete-producer
pattern: '(?i)(akeyless|aky)\s+gateway-delete-producer\b'
severity: block
message: "Akeyless gateway-delete-producer — removes dynamic secret producer from gateway"
category: akeyless
test_block: "akeyless gateway-delete-producer --name my-producer"
test_allow: "akeyless list-items --path /"
- name: akeyless-gateway-delete-k8s-auth
pattern: '(?i)(akeyless|aky)\s+gateway-delete-k8s-auth-config\b'
severity: block
message: "Akeyless gateway-delete-k8s-auth-config — removes K8s auth from gateway"
category: akeyless
test_block: "akeyless gateway-delete-k8s-auth-config --name my-k8s-auth"
test_allow: "akeyless list-items --path /"
- name: akeyless-gateway-delete-migration
pattern: '(?i)(akeyless|aky)\s+gateway-delete-migration\b'
severity: block
message: "Akeyless gateway-delete-migration — removes migration configuration"
category: akeyless
test_block: "akeyless gateway-delete-migration --id my-migration"
test_allow: "akeyless list-items --path /"
- name: akeyless-gateway-delete-allowed-access
pattern: '(?i)(akeyless|aky)\s+gateway-delete-allowed-access\b'
severity: block
message: "Akeyless gateway-delete-allowed-access — removes gateway access"
category: akeyless
test_block: "akeyless gateway-delete-allowed-access --id my-access"
test_allow: "akeyless list-items --path /"
- name: akeyless-delete-event-forwarder
pattern: '(?i)(akeyless|aky)\s+delete-event-forwarder\b'
severity: warn
message: "Akeyless delete-event-forwarder — removes audit/event forwarding"
category: akeyless
test_block: "akeyless delete-event-forwarder --name my-forwarder"
test_allow: "akeyless list-items --path /"
- name: akeyless-kmip-delete-client
pattern: '(?i)(akeyless|aky)\s+kmip-delete-client\b'
severity: block
message: "Akeyless kmip-delete-client — removes KMIP client"
category: akeyless
test_block: "akeyless kmip-delete-client --client-id my-client"
test_allow: "akeyless list-items --path /"
- name: akeyless-kmip-delete-server
pattern: '(?i)(akeyless|aky)\s+kmip-delete-server\b'
severity: block
message: "Akeyless kmip-delete-server — removes KMIP server"
category: akeyless
test_block: "akeyless kmip-delete-server --name my-server"
test_allow: "akeyless list-items --path /"
- name: akeyless-esm-delete
pattern: '(?i)(akeyless|aky)\s+esm-delete\b'
severity: block
message: "Akeyless esm-delete — removes external secrets manager sync"
category: akeyless
test_block: "akeyless esm-delete --name my-esm"
test_allow: "akeyless list-items --path /"
- name: akeyless-usc-delete
pattern: '(?i)(akeyless|aky)\s+usc-delete\b'
severity: block
message: "Akeyless usc-delete — removes universal secrets connector"
category: akeyless
test_block: "akeyless usc-delete --name my-usc"
test_allow: "akeyless list-items --path /"
- name: akeyless-dynamic-secret-tmp-creds-delete
pattern: '(?i)(akeyless|aky)\s+dynamic-secret-tmp-creds-delete\b'
severity: warn
message: "Akeyless dynamic-secret-tmp-creds-delete — revokes temporary credentials"
category: akeyless
test_block: "akeyless dynamic-secret-tmp-creds-delete --name /my/producer --tmp-creds-id abc123"
test_allow: "akeyless list-items --path /"
- name: akeyless-revoke-creds
pattern: '(?i)(akeyless|aky)\s+revoke-creds\b'
severity: block
message: "Akeyless revoke-creds — revokes dynamic secret credentials"
category: akeyless
test_block: "akeyless revoke-creds --name /my/producer"
test_allow: "akeyless list-items --path /"
- name: akeyless-revoke-certificate
pattern: '(?i)(akeyless|aky)\s+revoke-certificate\b'
severity: block
message: "Akeyless revoke-certificate — revokes PKI certificate"
category: akeyless
test_block: "akeyless revoke-certificate --name /my/cert --serial 12345"
test_allow: "akeyless list-items --path /"
- name: akeyless-gateway-revoke-tmp-users
pattern: '(?i)(akeyless|aky)\s+gateway-revoke-tmp-users\b'
severity: warn
message: "Akeyless gateway-revoke-tmp-users — revokes temporary gateway users"
category: akeyless
test_block: "akeyless gateway-revoke-tmp-users --name my-producer"
test_allow: "akeyless list-items --path /"
- name: akeyless-uid-revoke-token
pattern: '(?i)(akeyless|aky)\s+uid-revoke-token\b'
severity: warn
message: "Akeyless uid-revoke-token — revokes authentication token"
category: akeyless
test_block: "akeyless uid-revoke-token --revoke-token t-abc123"
test_allow: "akeyless list-items --path /"
- name: akeyless-rotate-key
pattern: '(?i)(akeyless|aky)\s+rotate-key\b'
severity: warn
message: "Akeyless rotate-key — rotates encryption key (old key version retired)"
category: akeyless
test_block: "akeyless rotate-key --name /my/key"
test_allow: "akeyless list-items --path /"
- name: akeyless-rotate-secret
pattern: '(?i)(akeyless|aky)\s+rotate-secret\b'
severity: warn
message: "Akeyless rotate-secret — forces immediate secret rotation"
category: akeyless
test_block: "akeyless rotate-secret --name /my/rotated-secret"
test_allow: "akeyless list-items --path /"
- name: akeyless-reset-access-key
pattern: '(?i)(akeyless|aky)\s+reset-access-key\b'
severity: block
message: "Akeyless reset-access-key — resets API access key (old key invalidated)"
category: akeyless
test_block: "akeyless reset-access-key --access-id p-abc123"
test_allow: "akeyless list-items --path /"