Home/ Questions/Q 205789
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T17:35:16+00:00

I have some files stored at amazon. all in private mode, and since I

  • 0

I have some files stored at amazon. all in private mode, and since I need provide users a way to download these files, each time an user needs to download a file I just create a authenticated url according to Authenticating REST Requests and the user can download the file for a gap of 5 minutes.

BUT once the url is generated I can see in the url my amazon key, is this something I should worry about? (I mean I know you need to have the secret key also to access to any object) but still this being secure?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    The key is fine to publicly distribute, the secret is not.

    So the answer is yes!

    Edit: The public key along with the secret is used to generate the nonce / signature. You need both to generate valid (secured) requests for amazon. The secret is private however.

    • 0