stupid question, can we not make a regex for searching API keys for particular APIs and do a brute force scan across the internet

There are a number of products and open source tools that do this. Look up "secret scanning".