Http Request Path Root Aws Credentials

Matches HTTP requests attempting to access the sensitive file path /root/.aws/credentials. This primitive helps identify exploitation or reconnaissance activity where attackers probe for exposed AWS credential files belonging to the root user, typically via file disclosure, path traversal, or misconfigured web application endpoints.