CODEWITHSUNDEEP
androidamazon-web-servicesamazon-s3
Alexey Zakharov
Alexey Zakharov

Reputation: 25102

How to upload files to Amazon S3 using Android SDK without exposing secret key

In this tutorial: http://aws.amazon.com/articles/3002109349624271 secret key is used during file upload.

I can't use secret key since my app users don't have amazon account and I can't share my amazon secret key to my app users.

I want to let users upload their avatars directly to S3 without passing through own proxy that has secret key.

I know that this is somehow possible for HTML 5 apps, but haven't find a documentated way for native SDK.

Upvotes: 1

Views: 2485

Answers (1)

Nachi
Nachi

Reputation: 4248

You can deploy a Token Vending Machine to generate temporary session keys for your users. Here's an example for an anonymous TVM.

Alternatively, you can use a framework like Filepicker.io which takes care of the authentication details for you.

Upvotes: 1

Related Questions