A risk for any repository which is owned by internal Amazon teams is the possibility to raise PRs/issues which contain confidential details.

We need a mechanism to prevent this in some way, ideally prior to raising a PR or issue.

Possible mechanisms include:

1. Bandit report which checks for internal URLs/actual AWS accounts/IAM roles/credentials.
   • Need to check with Open-Sourcing team if we can externalize these checks.
2. https://github.com/awslabs/automated-security-helper
3. https://github.com/awslabs/aws-security-assessment-solution