[Announcement] [UPDATED with Revised Plan 6/14/2019] AWS Signature Version 4 to replace AWS Signature Version 2 for signing S3 API requests

0

On June 11, 2018, we posted a deprecation announcement of Signature v2 (SigV2) for S3 requests. In response to feedback on the original deprecation plan, we are making an important change. Here is a summary, and please view this Jeff Barr Blog for more details: https://aws.amazon.com/blogs/aws/amazon-s3-update-sigv2-deprecation-period-extended-modified/

Original Plan: Support for SigV2 ends on June 24, 2019. (see original Forum post below)

Revised Plan: Any new buckets created after June 24, 2020 will not support SigV2 signed requests, although existing buckets will continue to support SigV2 while we work with customers to move off this older request signing method.

Original post from 6/11/2018:
AWS Signature Version 4 (SigV4) is recommended for signing S3 API requests over AWS Signature
Version 2 (SigV2) as it provides improved security by using a signing key rather than your secret access
key. SigV4 is currently supported in all AWS regions while SigV2 is only supported in regions launched
prior to Jan 2014. S3 will stop accepting requests signed using SigV2 in all regions on June 24, 2019, any
requests signed using SigV2 made after this time will fail. The signature version is set in your software,
please update your applications to use the latest versions of the tools and SDKs to take advantage of the
improved security and avoid impact.

Please visit the S3 documentation site to get more information on using SigV4:
https://docs.aws.amazon.com/general/latest/gr/signing_aws_api_requests.html. You can find the list of
changes between versions here: https://docs.aws.amazon.com/general/latest/gr/sigv4_changes.html.
Feel free to contact AWS Support if you have any questions or concerns:
https://docs.aws.amazon.com/awssupport/latest/user/getting-started.html.

  • This is an announcement migrated from AWS Forums that does not require an answer

AWS
asked 5 years ago607 views
No Answers

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions