Http Request Path Home Ubuntu Aws Credentials

Matches HTTP requests attempting to access the local file path /home/ubuntu/.aws/credentials. This primitive helps identify reconnaissance or exploitation activity where attackers probe for exposed AWS credential files on misconfigured web servers or vulnerable file-read endpoints, often as part of cloud credential harvesting attempts.