4 ms·
Not an expert on this. This doesn't seem secure. How are you confident you don't allow people to misuse your s3 bucket?
by andreime 9y ago
Not an expert on this.
This doesn't seem secure. How are you confident you don't allow people to misuse your s3 bucket?
- aaronds 9y agoThe S3 SDK allows you to generate a URL that can only be used to upload to a specific path (+ there are other constraints you can enforce, file size / mime type etc)
- eknkc 9y agoYou create a policy [1] for each upload and sign it. The users browser has to provide the policy which can set the path (or prefix), limit file size etc. [1]: http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-HTTPPOSTConstructPolicy.html http://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-HTTPPOS...
- andreime 9y agoThanks! TIL and I will actually need this info next month :)