AWS Access Key Inspector

// AKIA · ASIA · key type · account ID · rotate it

Paste a key ID, or text that contains key IDs

Found a key in your repo or logs? See its type and account before you rotate it. Paste key IDs only: never paste a secret access key anywhere, including here.

Summary

How the account ID is found

The first four characters give the type (AKIA, ASIA, AROA…). In current-format key IDs, the 16 characters after the prefix are Base32, and bits 7–46 of the first six bytes hold the 12-digit account ID. Older key IDs, such as those starting AKIAI or AKIAJ, don't carry it. Decoding happens on this page; the official check, which needs AWS credentials, is:

aws sts get-access-key-info --access-key-id AKIA…

An account ID isn't a secret, but it does help an attacker target an account. Treat decoded IDs like the rest of your internal notes.