English 中文(简体)
闪电:从亚马孙获得私人档案
原标题:Flash: Accessing private files from Amazon S3

我的闪电(AIR)申请采用单一控制系统(只有一台电脑运行,没有人能够使用)。

我将存放亚马孙S3号卫星的一些档案,我需要确保,只有我用该电脑在当地运行的闪电能够查阅这些档案。

我想知道,这样做的最佳(最有保障的)办法是什么。

我最初的想法是,把S3号卷宗放在私人档案上,并将秘密钥匙储存在管理闪电的当地计算机上。 然后,当我需要查阅第一场风暴的档案时,我会发出一个经过认证的、有一段时间到期的询问。 这方面的唯一问题是,我不知道如何在闪电中产生S3签字。 另外,我对储存闪电机上的秘密钥匙略感不安(即使它拥有一个没有其他用户使用的私人拥有的机器)。

是否有更好的办法? 我可以使用PHP的服务器,因此,我或许可以使用这种服务器,作为某种代理,我不敢肯定,在保持档案查阅安全的同时,如何通过网络服务器(而不是直接进入S3)。

希望得到任何帮助。

最佳回答

我将为此使用代理人,以便你能够重新利用你决定创建的未来客户档案检索结构。 闪电是否对代理人有真实性,请求以友好的预报方式提交档案,然后由您的代理人从S3中检索档案。

问题回答

暂无回答




相关问题
Signed executables under Linux

For security reasons, it is desirable to check the integrity of code before execution, avoiding tampered software by an attacker. So, my question is How to sign executable code and run only trusted ...

MALICIOUS_CODE EI_EXPOSE_REP Medium

I run findbugs against all of my code and only tackle the top stuff. I finally got the top stuff resolved and now am looking at the details. I have a simple entity, say a user: public class User ...

XSS on jsbin.com

Anyone know if jsbin.com implements any protection for XSS or other javascript attacks? I see jsbin links used fairly regularly on sites like this one and I can t find any indication from the site ...

Make md5 strong

Im making a website that will intergrate with game that only support md5 hashing metod (atm). Which ofc is not especially safe anymore. But how could i make it stronger? Should I just generate long ...

Why running a service as Local System is bad on windows?

I am trying to find out the difference between difference service account types. I tumbled upon this question. The answer was because it has powerful access to local resources, and Network Service ...

Brute-force/DoS prevention in PHP [closed]

I am trying to write a script to prevent brute-force login attempts in a website I m building. The logic goes something like this: User sends login information. Check if username and password is ...

热门标签