Http Request Path Aws Credentials Backup

Matches HTTP requests attempting to access a backup copy of an AWS credentials file at /.aws/credentials.bak. This primitive helps identify reconnaissance or exploitation attempts where attackers probe for exposed backup or temporary credential files that may contain cloud access keys or secrets due to misconfigured file serving, directory listing, or file disclosure vulnerabilities.