iterate-ch / cyberduck

Cyberduck is a libre FTP, SFTP, WebDAV, Amazon S3, Backblaze B2, Microsoft Azure & OneDrive and OpenStack Swift file transfer client for Mac and Windows.
https://cyberduck.io/
GNU General Public License v3.0
3.34k stars 290 forks source link

No pre-signed URLs available when using Credentials from AWS Command Line Interface connection profile #13738

Open foursec opened 2 years ago

foursec commented 2 years ago

Hi Team, Thanks for the great product. Here is my question - I can successfully connect and perform S3 operations using Credentials from AWS Command Line Interface. However Pre-signed URL is missing from the list of actions in Edit → Copy URL→ Signed URL or File → Info The docs say:

It is required that your AWS credentials are saved in keychain. Refer to Passwords.

Use keychain option is surely turned on.

I was digging around and didn't find a way to satisfy this requirement. Is there something I am missing here?

Thanks

Desktop (please complete the following information):

dkocher commented 2 years ago

This is expected with the current implementation as we cannot create signed URLs without a secret found in the password store (Keychain) ^1. With the Credentials from AWS Command Line Interface connection profile the secret key is not saved.

foursec commented 2 years ago

Thanks for info. Does Amazon S3 connection profile with hardcoded aws_access_key_id and aws_secret_access_key work for generating pre-signed URLs on Windows platforms which as I understand do not have a Keychain?

AliveDevil commented 2 years ago

Windows platforms which as I understand do not have a Keychain?

Keychain refers to the general concept of a credential manager. On Windows this is managed through the Windows Credential Manager.

dkocher commented 2 years ago

Thanks for info. Does Amazon S3 connection profile with hardcoded aws_access_key_id and aws_secret_access_key work for generating pre-signed URLs on Windows platforms which as I understand do not have a Keychain?

Using the generic S3 connection profile this is supported and credentials will be saved in the password manager.