S3 GET without Signing (Cleartext possible?)
-
09-09-2019 - |
Question
Is there a way to GET a object from Amazon S3 by sending the cleartext Accesskey:Secret instead of signing/HMAC?
Solution
Not unless the ACL is set for anonymous read access.
OTHER TIPS
Another option would be to use Amazon S3 query string authentication with your URL. Most Amazon S3 clients can generate that.
You can also use an S3fm, an online file manager for Amazon S3. Just select Web URL in your context menu and generate an URL with an expiration date.
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow