I am new to Amazon AWS S3 and I was wondering why my signedURL contains my AccessKeyId
. Isn't that a security issue, so that other people who have the URL have my accessKey and could potentially get access to my account / bucket?
const getURL = async (key) => {
const params = {
Bucket: myBucket,
Key: key,
Expires: 60,
};
const url = await new Promise((resolve, reject) => {
s3.getSignedUrl("getObject", params, function (err, url) {
if (err) {
reject(err);
}
resolve(url);
});
});
console.log(url) // signed URL that contains the AccessKeyId and Signature
}