如何使用python在aws s3的预签名url中隐藏我的访问密钥

Question

I am generating pre-signed url on aws s3 using python. ater generating it shows my access key in the url. how can I generate url with showing my access key?

https://console.wasabisys.com/testing-usman/?AWSAccessKeyId=

This is the code i am using:

s3 = boto3.client('s3',
endpoint_url = 'https://console.wasabisys.com',
aws_access_key_id = '<4XR7DSJX1MYFYXETUGBA>',
aws_secret_access_key = '<8aD49ac2cJsuWr7crjRTAN0jqH4JzyV6uQwhJyw1>')

url = s3.generate_presigned_url(
ClientMethod='get_object',
Params={
    'Bucket': 'testing-usman',
    'Key': '.'  

   }
)
print(url)

I need the url without showing my access key.

Answer 1

You need to provide a credential to aws, so to looks less explicit you can add to the boto3 client a config:

from botocore.client import Config

s3 = boto3.client('s3',
config=Config(signature_version='s3v4'),
endpoint_url = 'https://console.wasabisys.com',
aws_access_key_id = '<4XR7DSJX1MYFYXETUGBA>',
aws_secret_access_key = '<8aD49ac2cJsuWr7crjRTAN0jqH4JzyV6uQwhJyw1>')