Techniques for code detection of API paths

1 . A method for generating an Application Programming Interface (API) path utilizing code detection, comprising:

querying a cloud service provider (CSP) resource management API for deployment metadata identifying a resource, wherein the resource is deployed in a cloud computing environment of the CSP;

identifying based on the deployment metadata at least a code object, referenced by an infrastructure as code (IaC) deployment definition that instantiated the resource, of a plurality of code objects stored in a code repository;

statically analyzing only the at least a code object from which the resource is deployed for a hint of an API path;

generating, based on the hint of the API path, a machine-readable network request including a potential API path based on the hint of the API path;

transmitting the machine-readable network request to the resource in the cloud computing environment; and

classifying the potential API path as a validated API path based on a network protocol response received from the resource in response to transmitting the machine-readable network request.

2 . The method of claim 1 , further comprising:

scanning the cloud computing environment to detect the resource.

3 . The method of claim 1 , wherein detecting a resource further comprises:

querying an API of the cloud computing environment for identifiers of deployed resources.

4 . The method of claim 1 , further comprising:

accessing the code repository utilizing a received credential.

5 . The method of claim 4 , further comprising:

inspecting the code repository for code objects.

6 . The method of claim 1 , wherein detecting at least a code object from which the resource is deployed further comprises:

filtering the plurality of code objects in the code repository.

7 . The method of claim 1 , further comprising:

parsing each of the plurality of code objects to detect code objects that are utilized in an Infrastructure as Code (IaC) to deploy the resource in the cloud computing environment.

8 . The method of claim 1 , further comprising:

detecting the hint of the API path based on conducing static analysis on the at least a code object from which the resource is deployed.

9 . The method of claim 1 , wherein generating an API path that corresponds to the hint of the API path further comprises:

querying a security database based on the hint of the API path for a corresponding API path.

10 . The method of claim 1 , further comprising:

sending a second machine-readable network request only to the validated API path.

11 . A non-transitory computer-readable medium storing a set of instructions for generating an Application Programming Interface (API) path utilizing code detection, the set of instructions comprising:

one or more instructions that, when executed by one or more processing circuitries of a device, cause the device to:

query a cloud service provider (CSP) resource management API for deployment metadata identifying a resource, wherein the resource is deployed in a cloud computing environment of the CSP;

identify based on the deployment metadata at least a code object, referenced by an infrastructure as code (IaC) deployment definition that instantiated the resource, of a plurality of code objects stored in a code repository;

statically analyze only the at least a code object from which the resource is deployed for a hint of an API path;

generate, based on the hint of the API path, a machine-readable network request including a potential API path based on the hint of the API path;

transmit the machine-readable network request to the resource in the cloud computing environment; and

classify the potential API path as a validated API path based on a network protocol response received from the resource in response to transmitting the machine-readable network request.

12 . A system for generating an Application Programming Interface (API) path utilizing code detection comprising:

a processing circuitry;

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

query a cloud service provider (CSP) resource management API for deployment metadata identifying a resource, wherein the resource is deployed in a cloud computing environment of the CSP;

identify based on the deployment metadata at least a code object, referenced by an infrastructure as code (IaC) deployment definition that instantiated the resource, of a plurality of code objects stored in a code repository;

statically analyze only the at least a code object from which the resource is deployed for a hint of an API path;

generate, based on the hint of the API path, a machine-readable network request including a potential API path based on the hint of the API path;

transmit the machine-readable network request to the resource in the cloud computing environment; and

classify the potential API path as a validated API path based on a network protocol response received from the resource in response to transmitting the machine-readable network request.

13 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

scan the cloud computing environment to detect the resource.

14 . The system of claim 12 , wherein the memory contains further instructions that, when executed by the processing circuitry for detecting a resource, further configure the system to:

query an API of the cloud computing environment for identifiers of deployed resources.

15 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

access the code repository utilizing a received credential.

16 . The system of claim 15 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

inspect the code repository for code objects.

17 . The system of claim 12 , wherein the memory contains further instructions that, when executed by the processing circuitry for detecting at least a code object from which the resource is deployed, further configure the system to:

filter the plurality of code objects in the code repository.

18 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

parse each of the plurality of code objects to detect code objects that are utilized in an Infrastructure as Code (IaC) to deploy the resource in the cloud computing environment.

19 . The system of claim 12 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

detect the hint of the API path based on conducing static analysis on the at least a code object from which the resource is deployed.

20 . The system of claim 12 , wherein the memory contains further instructions that, when executed by the processing circuitry for generating an API path that corresponds to the hint of the API path, further configure the system to:

query a security database based on the hint of the API path for a corresponding API path.