All geek questions in one place

Are authenticated URLs in s3 safe?

I have files stored on amazon. everything is in private mode, and since I need to provide users with a way to download these files, every time a user needs to download a file, I simply create an authenticated URL in accordance with REST request authentication , and the user can download the file in 5 minutes.

BUT, but as soon as the url is generated, I can see my Amazon key in the url, is that what I should worry about? (I mean, I know that you need a secret key to access any object), but is it still safe?

+3
source share
1 answer

The key is in order to be publicly distributed, the secret is not like that.

So the answer is yes!

Edit: the public key along with the secret is used to generate nonce / signature. You need both to generate valid (protected) requests for amazon. However, the secret is secret.

+5
source

Source: https://habr.com/ru/post/1707113/

More articles:


All Articles