No. That wasn’t possible. Those were his old keys. The ones rotated after the breach they never found.

: If you must use static keys, use the AWS CLI to rotate them every 90 days or less.

The string file:///../../../../home/*/ .aws/credentials is not just a random sequence of characters; it is a classic example of a (or Directory Traversal) attack vector. Specifically, it targets one of the most sensitive files in a cloud-native environment: the AWS credentials file.