Lambda URL with x-amz-content-sha256 header

Hey guys,

I want to ask can we (from client) create x-amz-content-sha256 then add it to header each time we request to AWS URL? How to implement that solution.

Thank you!!!

Topics

Tags

Language

English

asked 13 days ago53 views

1 Answer

Are these answers helpful? Upvote the correct answer to help the community benefit from your knowledge.

Accepted Answer

Yes, you can. Do you access your lambda behind a Cloudfront? Check how to restrict user access for Post and Put with the header x-amz-content-sha256: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-lambda.html

If you are using python in your client side, you can use hashlib library.

Example:

import hashlib

payload = b'{"key": "value"}'  # Replace with your actual payload
sha256_hash = hashlib.sha256(payload).hexdigest()

Then you can call the Lambda URL, includes the value sha256_hash in the request header using x-amz-content-sha256.

EXPERT

answered 13 days ago

Bach
13 days ago
Thank you for your answer, sir!

But can I do it from client side, not by Cloudfront?

I assume that traffic between client and Cloudfront is viewed by hacker then it can edit content. so that if we put x-amz-content-sha256 at Cloudfront side I think it does not work!
AmerO EXPERT
13 days ago
Hi Kaii, to secure your data in-transit between Client and CF, I recommend reviewing this AWS documentation: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html

This blog is also helpful for the portion of protecting your Lambda URL behind Cloudfront: https://aws.amazon.com/blogs/networking-and-content-delivery/secure-your-lambda-function-urls-using-amazon-cloudfront-origin-access-control/

Relevant content