Accessing AWS S3 using AWS SDK for JavaScript

Question

Right now I am using the javascript SDK to access my s3 bucket and it works fine but I have hard-coded all my credentials in the javascript directly but in the SDK they are saying you can store these in the AWS.config object and I dont know how to do this. Also, the online resources are not informative so can someone please let me know how to do this or any other better way to do this instead of hard-coding the credentials?

    <script type="text/javascript">
        AWS.config.accessKeyId = 'dddddddddd';
        AWS.config.secretAccessKey = 'rrrrrrrrrrrrrrrreeeeeeeeeeeeeeeeeeeee';
        AWS.config.region = 'us-east-1';

        // create the AWS.Request object
        var bucket = new AWS.S3({ params: { Bucket: 'some.bucket' } });
        bucket.listObjects(function (err, data) {
            if (err) {
                document.getElementById('status').innerHTML =
                  'Could not load objects from S3';
            } else {
                document.getElementById('status').innerHTML =
                  'Loaded ' + data.Contents.length + ' items from S3';
                for (var i = 0; i < data.Contents.length; i++) {
                    document.getElementById('objects').innerHTML +=
                      '<li>' + data.Contents[i].Key + '</li>';
                }
            }
        });
    </script>

For anyone still visiting this, accessKeyId and secreteAccessKey is deprecated. I chose to use this method: docs.aws.amazon.com/sdk-for-javascript/v2/developer-guide/… — Kevin Danikowski
– Kevin Danikowski, Commented Feb 27, 2018 at 3:59

Paul A. · Accepted Answer · 2015-05-09 22:53:15Z

1

I think a better way is to store it in ~/.aws/credentials. You can do that by creating the file or using aws configure with the cli command, answer the questions and it will generate this file:

[default]
aws_access_key_id = THEACCESSKEYHERE
aws_secret_access_key = THESECRETACCESSKEYHERE

and ~/.aws/config:

[default]
output = json (or whatever you prefer here)
region = us-east-1 (or whatever region you are using)

This works without having to manually add it for each command or call to the AWS you require.

answered May 9, 2015 at 22:53

Paul A.

5972 gold badges12 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dtor Over a year ago

What do you put in the javascript to have it load them from the .aws/credentials file?

f1lt3r Over a year ago

@Dtor console.log(process.env.aws_secret_access_key)

Rico · Accepted Answer · 2013-12-04 23:38:04Z

0

I believe this is not supported in the browser. The AWS Javascript SDK is fully supported on node.js.

Read this: http://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS.html

It kind of makes sense, since nobody would want to expose private authentication/authorization information in public.

If you want to get fancy you could potentially pass the credentials using JSONP from another server (http://en.wikipedia.org/wiki/JSONP) and restrict access to certain clients using a firewall, but it can get kinda messy.

On a different note, why not expose the S3 bucket publicly for read access since the javascript on the browser is public anyways?

answered Dec 4, 2013 at 23:38

Rico

62.1k12 gold badges121 silver badges156 bronze badges

1 Comment

f1lt3r Over a year ago

Doesn't AWS contain a lot of public authentication/authorization information anyway? (see Cognito SDK examples). My understanding, correct me if I'm wrong, is that authorization can be on a per-identity basis, and session keys are generated for logins that are attached to IAM roles, and that the system is "secure enough" because these keys are passed over HTTPS, locked to the domain, and expired. And also.. perfect forward secrecy can be switched on. So the identity-access-keys can come from an Identity Pool login, and do not have to be actual admin-access-keys to the bucket. Make sense?

Community · Accepted Answer · 2017-05-23 11:45:47Z

0

There is a way to achieve JS uploads in the browser without revealing your private credentials. It does however, require some server side logic.

See answer here: S3 upload directly in JavaScript

edited May 23, 2017 at 11:45

CommunityBot

11 silver badge

answered Feb 14, 2015 at 3:44

chrisboustead

1,57312 silver badges17 bronze badges

Collectives™ on Stack Overflow

Accessing AWS S3 using AWS SDK for JavaScript

3 Answers 3

2 Comments

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related