Create temporary signed urls for private S3 buckets.
This is a fork of https://github.com/hajoeichler/s3cmd-signed-url with the following changes:
- no longer depends on s3cmd (uses openssl instead)
- adds "-p" for "path-based" naming instead of "virtual-host" naming
- sets the host base URL properly for non-AWS endpoints
- allows using a different s3cfg configuration file
The s3cmd-signed-url tool depends on the openssl command line tool.
s3cmd-signed-url -b bucket -o object_uri [-c s3cfg] [-p] [-a access_key] [-s method] [-s seconds]
-b bucket_name: bucket name (example: my-bucket)
-o object_uri: URI part of object in S3 bucket (example: somefolder/somefile.ext)
-m http_method: HTTP method to sign - e.g. PUT (default GET)
-a access_key: S3 Access Key (default ${S3_ACCESS_KEY})
-s seconds: how long the signed url will be valid (default 3600)
-p: use path style (e.g. https://example.com/bucket) for buckets instead of the default hosted style (e.g. https://bucket.example.com)
-c configfile: which s3cfg configuration file to use
-h: see this usage information
$ s3cmd mb s3://bucket1732
$ s3cmd-signed-url -b bucket1732 -o objectname -m PUT -s 3600
https://bucket1732.s3.amazonaws.com/objectname?AWSAccessKeyId=KAAIZJ74GOYKDXBLETQ2&Expires=1495202745&Signature=Chdi76brdzgDImNDWbRhsVo1x%2FY%3D
$ curl -i -T somefile 'https://bucket1732.s3.amazonaws.com/objectname?AWSAccessKeyId=KAAIZJ74GOYKDXBLETQ2&Expires=1495202745&Signature=Chdi76brdzgDImNDWbRhsVo1x%2FY%3D'
HTTP/1.1 100 Continue
HTTP/1.1 200 OK
[ output elided ]
$ s3cmd ls s3://bucket1732
2017-05-19 13:06 4007 s3://bucket1732/objectname