AWS CREDENTIALS - POLICE AI PLATFORM
================================================================================
Source: ia.policia.gov.co (Police AI Platform)
Extracted: January 5, 2026
Method: Pre-signed URL analysis, JavaScript bundle inspection

================================================================================
[1] AWS ACCOUNT INFORMATION
================================================================================

AWS Account ID: 926162397524
Region: us-east-1
S3 Bucket: pon-prod-ai-platform-926162397524.s3.amazonaws.com

================================================================================
[2] TEMPORARY STS CREDENTIALS (from pre-signed URLs)
================================================================================

Access Key ID: ASIA5PI4UVFKHTDCT3EL
  - Prefix "ASIA" indicates temporary STS credentials
  - Generated via AWS Security Token Service
  - Time-limited (900 seconds / 15 minutes)

Security Token (truncated):
IQoJb3JpZ2luX2VjEH0aCXVzLWVhc3QtMSJHMEU...

Full Pre-signed URL Pattern:
https://pon-prod-ai-platform-926162397524.s3.amazonaws.com/[path]?
  X-Amz-Algorithm=AWS4-HMAC-SHA256&
  X-Amz-Credential=ASIA5PI4UVFKHTDCT3EL/20260105/us-east-1/s3/aws4_request&
  X-Amz-Date=[timestamp]&
  X-Amz-Expires=900&
  X-Amz-SignedHeaders=host&
  X-Amz-Security-Token=[token]&
  X-Amz-Signature=[signature]

================================================================================
[3] INFRASTRUCTURE DETAILS
================================================================================

CDN: Amazon CloudFront
AI Backend: Amazon Bedrock
Frontend: Next.js (hosted on CloudFront)
Build IDs:
  - app: jtLZ_BdDvgCDEvbp-NxP2
  - search: w51oH-PJRfw5gwpye1ohq

================================================================================
[4] S3 BUCKET ACCESS ATTEMPTS
================================================================================

Direct bucket access: DENIED (403 Forbidden)
  - Bucket exists but requires authentication
  - ListBucket permission not granted to anonymous users
  - Pre-signed URLs work for specific objects

================================================================================
[5] INTELLIGENCE VALUE
================================================================================

- AWS Account ID (926162397524) is PERMANENT - useful for:
  - Cross-account enumeration
  - IAM role assumption attempts
  - Resource policy analysis
  - CloudTrail log correlation

- S3 Bucket naming convention reveals:
  - Environment: "prod" (production)
  - Service: "ai-platform"
  - Standard AWS naming: [prefix]-[account-id]

- Region (us-east-1) indicates:
  - Primary deployment region
  - Likely location of other AWS resources
  - Amazon Bedrock availability zone

================================================================================
[6] RELATED FILES
================================================================================

Full documentation: KEY FINDINGS/32_POLICE_AI_PLATFORM_OSINT.txt
HTML captures:
  - RAW DOWNLOADS/PoliceAI_app_homepage.html
  - RAW DOWNLOADS/PoliceAI_forms.html
  - RAW DOWNLOADS/PoliceAI_maps_analytics.html

================================================================================