Signing Requests
Get ready to learn how to sign requests to an AWS service using security keys!
We'll cover the following...
IAM user keys
To explain how temporary grants work, you first need to understand the role of the security keys you entered when configuring command-line access in Chapter 2.
Each IAM user has two keys:
- an access key
- a secret key
When the SDK makes a request to an AWS service, for example s3.putObject(), it sends the access key in the request headers. This allows the service to map the request to an AWS account. The SDK also sends a cryptographic signature based on the request body and the secret key using Amazon’s Signature Version 4 Signing Process (SIGV4 algorithm). The receiving service uses the access key to locate the corresponding secret key in the IAM database, and also creates a SIGV4 ...
Ask