AWS S3 Upload Using Signed URL

Question

AWS provides SDKs on iOS and Android to upload to their servers yet you don't want your key exposed if it was decompiled. How do you prevent that? Is there a way to sign a URL on the backend and give it to the client so they can upload directly onto S3 Without exposing the key?

Dan C. · Accepted Answer · 2014-09-29 05:52:26Z

1

You can use Amazon STS (Security Token Service) to generate unique sign-in credentials that also expire automatically.

You can also control permissions on these temporary credentials obtained via STS (for example to allow only upload permissions in a certain S3 bucket).

answered Sep 29, 2014 at 5:52

Dan C.

13.7k4 gold badges72 silver badges77 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

Math is Hard Over a year ago

Is there a way I get generate one via rails?

Dan C. Over a year ago

There's an AWS SDK for Ruby. Check out docs.aws.amazon.com/AWSRubySDK/latest/AWS/STS.html

Math is Hard Over a year ago

Thanks I'll investigate this!

Math is Hard Over a year ago

So am I supposed to make an IAM user with certain security parameters and provide session tokens to each of my clients with those tokens when needed?

Collectives™ on Stack Overflow

AWS S3 Upload Using Signed URL

1 Answer 1

4 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

4 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related