1 回答
- 最新
- 投票最多
- 评论最多
0
I would think you would want to do file type validation and possibly limit max size in your flutter application.
Are you using Amplify or the straight API? Here is a link to the Amplify Flutter docs for Upload files. It might help.
https://docs.amplify.aws/lib/storage/upload/q/platform/flutter/
I would always opt for a bucket policy that is secure and any public bucket should probably be behind a CloudFront distribution.
I just tried this policy and it still allowed me to upload non-jpg file types:
{
"Version": "2012-10-17",
"Id": "Policy1464968545158",
"Statement": [
{
"Sid": "Stmt1464968483619",
"Effect": "Allow",
"Principal": {
"AWS": "arn:aws:iam::111111111111:assumed-role/MyRole/MyUser"
},
"Action": "s3:PutObject",
"Resource": "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*.jpg",
"Condition": {
"Bool": {
"aws:SecureTransport": "true"
}
}
}
]
}
已回答 6 个月前
相关内容
- AWS 官方已更新 1 年前
- AWS 官方已更新 2 年前
- AWS 官方已更新 3 年前
My flutter team decided to use Firebase and they would like to stick with it and not use AWS technologies at all. That is why I am using the API by generating presigned URL from the backend. Doing validation in the mobile app sounds reasonable, but is it keeping me from abusive users? My intuition tells me no, but maybe I am wrong?