相关文章推荐
焦虑的骆驼  ·  TypeError: expected ...·  9 月前    · 
爱听歌的刺猬  ·  swing ...·  1 年前    · 
八块腹肌的葡萄酒  ·  HTTP 501 for ...·  1 年前    · 
Collectives™ on Stack Overflow

Find centralized, trusted content and collaborate around the technologies you use most.

Learn more about Collectives

Teams

Q&A for work

Connect and share knowledge within a single location that is structured and easy to search.

Learn more about Teams

In my form it showing my policy and x-amz-credential, x-amz-alorithm, x-amz-signature, my bucket, etc...

data-form-data = "{"key":"/uploads/temporary/<some random numbers/letters>/${filename}",
                   "success_action_status":"201",
                   "acl":"public-read",
                   "Content-Type":"image/jpeg",
                   "policy":"<bunch of random numbers/letters",
                   "x-amz-credential":"<your-access-key-id>/<date>/<aws-region>/<aws-service>/aws4_request",
                   "x-amz-algorithm":"<some random numbers/lettering>",
                   "x-amz-date":"<some random numbers/letters>",
                   "x-amz-signature":"<some random numbers/letters>"}"
data-url="https://<bucket-name>.s3.amazonaws.com"
data-hose="<bucket-name>.s3.amazonaws.com

Yes, that's fine. It's designed not to expose sensitive data, and this data isn't sensitive.

Your AWS Access Key Secret is the only value that is secret and must not be revealed. (There's also a sensitive intermediate value called the signing key that's generated from the secret, which you won't see unless you wrote your own V4 request signing code). The signature is derived from the signing key and other request parameters; the signing key is service and region specific and is derived from the secret and used in your code, then discarded... and both of these values are generated using in a one-way process that makes it computationally infeasible to reverse-engineer.

Thanks for contributing an answer to Stack Overflow!

  • Please be sure to answer the question. Provide details and share your research!

But avoid

  • Asking for help, clarification, or responding to other answers.
  • Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.