gnu sed masking out key,token,secret when reading a file to stdout - could be used as an alias to used for demo/presenting. gsed -r -e "s/((key|token|secret)[^(:|=)]*(=|:)[\t| ]+?['|\"]?+)[^('|\"|$)]*('|\"|$)/\1xxxxxxxxxxx\4/g" ~/.aws/credentials