Investigate Amazon Cognito
Opened this issue · 0 comments
rajadain commented
Instead of having to specify one's AWS credentials, which is insecure over the internet and prohibits deployment, it would be useful to be able to use Amazon Cognito for handling authentication. The token received from Cognito could be used by the backend to access S3 securely without having to expose one's AWS SECRET ACCESS KEY, potentially allowing for cloud deployment.