Resources
Amazon S3 documentation
-
Authenticating Requests (AWS Signature Version 4)
-
Authenticating Requests: Using Query Parameters (AWS Signature Version 4)
-
Authenticating Requests: Browser-Based Uploads Using POST (AWS Signature Version 4)
-
Amazon S3 Signature Version 4 Authentication Specific Policy Keys
Other references
-
Building a Data Perimeter on AWS (AWS whitepaper)
-
SEC03-BP02 Grant least privilege access (AWS Well Architected Framework, Security pillar)
-
SEC03-BP05 Define permission guardrails for your organization (AWS Well Architected Framework, Security Pillar)