SimpleDB直接客户端访问
S3 对于内容存储的有用之处之一是客户端可以直接发出直接 HTTP 请求来下载对象。例如,Twitter 就是这样提供头像图像的。
SimpleDB 提供数据的 HTTP 接口。客户端软件(即桌面、移动设备)是否可以调用从 SimpleDB 域读取值,而无需编写位于 SimpleDB 和客户端之间的代理,而无需< /em> 共享不应共享的凭据?或者中间的代理是唯一的出路吗?
One of the useful things about S3 for content storage is that a client can directly make a direct HTTP request to download the object. For instance, this is how Twitter serve up avatar images.
SimpleDB provides an HTTP interface to data. Rather than having to write a proxy that sits inbetween SimpleDB and the client, is it possible for client software (i.e. desktop, mobile) to make calls to read values from a SimpleDB domain, without sharing credentials that shouldn't be shared? Or is a proxy in-between the only way to go?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
不幸的是,仍然没有安全的方法来做到这一点。这不仅使不受信任的桌面/移动用例变得比应有的更加困难,而且对于 flash/silverlight 客户端也是如此。
我多次向 AWS 请求,要求他们启用 SQS 中提供的相同类型的细粒度访问控制,包括策略语言和对帐户、IP 地址、日期范围等各种标准的权限授予。
我只希望他们决定实施它。
Unfortunately there is still no secure way to do this. Not only does this make the untrusted desktop/mobile use case much more difficult than it ought to be, it also does the same for the flash/silverlight client.
I have repeatedly made the request to AWS that they enable the same sort of fine grained access controls that are available in SQS, including the policy language and permission grants to the various criteria like account, IP address, date ranges, etc.
I only hope they decide to implement it.
现在,您可以使用 WebServius(它基本上充当 SimpleDB 和访问数据的客户端之间的代理)来执行此操作。请参阅 http://blog.webservius.com/2010/ 09/14/介绍-amazon-simpledb-集成/
You can now do this with WebServius (which basically acts as a proxy between SimpleDB and the clients accessing the data). See http://blog.webservius.com/2010/09/14/introducing-amazon-simpledb-integration/
现在还可以使用廉价/免费的微型 EC2 实例来托管您自己的 SimpleDB 代理,与在其他地方托管相比,延迟更短。
An inexpensive/free tier micro EC2 instance can now also be used to host your own proxy to SimpleDB, with less latency than hosting elsewhere.