Home/ Questions/Q 1927928
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-17T06:55:07+00:00

I am making an app that accesses Amazon S3. But should I put the

  • 0

I am making an app that accesses Amazon S3.

But should I put the Amazon S3 login credentials (Access Key ID and Secret Access Key) into the .exe that customers will be using?

DropBox uses Amazon S3, but how do they store their login credentials? When I send a file to my DrobBox, does the file go to their server first, then their server logs into S3 using their credentials?

I can always obfuscate my .exe but I am still very leery about putting my Amazon S3 info into the .exe.

Any ideas or suggestions?

Thanks.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    you may consider implementing your own server-side authentication layer, which will authenticate user and sign requests,

    amazon s3 credentials are needed to sign aws requests. you may do this on server side.

    for example:

    1. your app send request to your server with user credentials
    2. your server side code check user credentials and sign aws request
    3. your app send signed request to amazon
    • 0