CODEWITHSUNDEEP
amazon-web-servicesamazon-iam
Martin Bean
Martin Bean

Reputation: 39429

Best way to protect resources hosted on Amazon S3?

I’m creating a website where people can sign up and pay to watch videos. The site will be built in PHP and envisage it working as follows:

Therefore, I need a way to protect objects on a per-user basis so a user can’t pay to watch a video, inspect the HTML, and share the video’s URL with someone else who could then watch it without paying.

I thought about using IAM, creating an IAM user with access to purchased videos (objects) granted as a permission as a registered user on my website purchases videos, but watching the introduction video from AWS it seems IAM users are more for granting access to people to be able to log into the AWS Console and manage my AWS services, and not as a method of granting privileges to objects to users of a web service.

If I’m right in thinking that IAM users are more for those accessing my services via the Console, what are my options for granting specific privileges to users of my application?

Upvotes: 0

Views: 680

Answers (1)

Kyle Kelley
Kyle Kelley

Reputation: 14144

You'll need to use your own auth system in tandem with Amazon's Signing and REST Authentication API and AssumeRoleWithWebIdentity to create temporary security credentials per user (upon request).

Upvotes: 1

Related Questions