[Announcement] [UPDATED with Revised Plan 6/14/2019] AWS Signature Version 4 to replace AWS Signature Version 2 for signing S3 API requests

0

On June 11, 2018, we posted a deprecation announcement of Signature v2 (SigV2) for S3 requests. In response to feedback on the original deprecation plan, we are making an important change. Here is a summary, and please view this Jeff Barr Blog for more details: https://aws.amazon.com/blogs/aws/amazon-s3-update-sigv2-deprecation-period-extended-modified/

Original Plan: Support for SigV2 ends on June 24, 2019. (see original Forum post below)

Revised Plan: Any new buckets created after June 24, 2020 will not support SigV2 signed requests, although existing buckets will continue to support SigV2 while we work with customers to move off this older request signing method.

Original post from 6/11/2018:
AWS Signature Version 4 (SigV4) is recommended for signing S3 API requests over AWS Signature
Version 2 (SigV2) as it provides improved security by using a signing key rather than your secret access
key. SigV4 is currently supported in all AWS regions while SigV2 is only supported in regions launched
prior to Jan 2014. S3 will stop accepting requests signed using SigV2 in all regions on June 24, 2019, any
requests signed using SigV2 made after this time will fail. The signature version is set in your software,
please update your applications to use the latest versions of the tools and SDKs to take advantage of the
improved security and avoid impact.

Please visit the S3 documentation site to get more information on using SigV4:
https://docs.aws.amazon.com/general/latest/gr/signing_aws_api_requests.html. You can find the list of
changes between versions here: https://docs.aws.amazon.com/general/latest/gr/sigv4_changes.html.
Feel free to contact AWS Support if you have any questions or concerns:
https://docs.aws.amazon.com/awssupport/latest/user/getting-started.html.

  • This is an announcement migrated from AWS Forums that does not require an answer

AWS
posta 5 anni fa531 visualizzazioni
Nessuna risposta

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande