如何安全地向博客提供 S3 文件
我正在创建一个博客，并且正在选择在哪里托管它。现在我想要一个免费的解决方案，例如 Blogger 或 Wordpress.com。
我面临的问题是，我想在我的博客中使用 S3 存储桶中的文件，但我发现的博客解决方案都不支持任何类型的服务器代码，这意味着为了使用 S3 查询字符串身份验证，我需要必须将易受攻击的信息放入客户端。出于显而易见的原因，我不想这样做。
因此，我正在寻找有关如何安全地将 S3 的内容包含在免费博客主机中的想法。
I'm starting a blog and i'm in the process of choosing where should i host it. For now i want a free solution like Blogger or Wordpress.com.
The problem i'm facing is that i want to use files i have in a S3 bucket in my blog but none of the blog solutions i found supports any kind of server code, which means that in order to use S3 query string authentication i would have to put vulnerable information in the client. For obvious reasons i don't want to do that.
So, i'm looking for ideas on how i can safely include content from S3 in a free blog host.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我不知道有任何博客软件默认支持 Amazon S3。所以你最好的办法是获得一个便宜的托管（现在托管真的很便宜，每月几美元）。然后您可以安装支持Amazon S3的插件。
Im not aware of any blog software that by default supports Amazon S3. So your best shot is to get a cheap hosting (hosting is really cheap these days, a few dollars a month). Then you can install a plugin which supports Amazon S3.
我想我们可能需要更多细节。例如，如果您只想从博客链接到 S3 上的文件，则可以使文件在 S3 上全局可读，然后只需链接到它们，无需进行身份验证。
如果您想做一些更复杂的事情，也许可以考虑使用 WordPress.org 自己托管 WordPress，此时您可以自己使用服务器端代码，也许作为插件。或者，也许有一个适用于 WordPress 的现有插件适合您 - 肯定有一个插件可以将 WordPress 文件上传复制到 S3，然后从那里提供服务，而不是从您的博客主机等处提供服务。它不是免费的免费解决方案，但托管起步价相当便宜。
出于相当明显的安全原因，我能想到没有任何博客服务提供商提供服务器端代码访问。
I think we might need a bit more detail here. For example, if you just want to link to files on S3 from your blog, you can make the files globally readable on S3 and then just link to them, with no authentication necessary.
If you want to do something more complex, maybe look into hosting WordPress yourself using WordPress.org, at which point you can use server-side code yourself, perhaps as a plugin. Or, maybe there's an existing plugin that works with WordPress that would suit you -- there's definitely a plug-in which copies WordPress file uploads to S3 and then serves them from there, rather than from your blog host, for example. It's not free a free solution, but hosting starts pretty cheap.
For fairly obvious reasons of security, there aren't any blog service providers I can think of who provide server-side code access.