# 上传示例 (AWS Signature Version 2)**** **Topics** + [文件上传](#HTTPPOSTExamplesFileUpload) + [文本区域上传](#HTTPPOSTExamplesTextArea) **注意** 本节中讨论的请求身份验证基于 AWS Signature Version 2，这是一种对 AWS 服务的入站 API 请求进行身份验证的协议。 Amazon S3 现在在所有 AWS 区域 支持 Signature Version 4，后者是一种用于对 AWS 服务入站 API 请求进行身份验证的协议。目前，于 2014 年 1 月 30 日前创建的 AWS 区域 将继续支持之前的协议：Signature Version 2。于 2014 年 1 月 30 日后创建的所有新区域将只支持 Signature Version 4，因此，发往这些区域的所有请求都必须采用 Signature Version 4。有关更多信息，请参阅《*Amazon Simple Storage Service API 参考*》中的[示例：使用 HTTP POST 的基于浏览器的上传（使用 AWS Signature Version 4）](https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-post-example.html)。 ## 文件上传 此示例演示构造用于上传文件附件的策略和表单的完整过程。 ### 策略和表单构建 以下策略支持针对 awsexamplebucket1 存储桶上传到 Amazon S3。 ``` 1. { "expiration": "2007-12-01T12:00:00.000Z", 2. "conditions": [ 3. {"bucket": "awsexamplebucket1"}, 4. ["starts-with", "$key", "user/eric/"], 5. {"acl": "public-read"}, 6. {"success_action_redirect": "https://awsexamplebucket1.s3.us-west-1.amazonaws.com/successful_upload.html"}, 7. ["starts-with", "$Content-Type", "image/"], 8. {"x-amz-meta-uuid": "14365123651274"}, 9. ["starts-with", "$x-amz-meta-tag", ""] 10. ] 11. } ``` 此策略要求以下内容： + 上传必须在 2007 年 12 月 1 日 12:00 UTC 之前进行。 + 内容必须上传到 awsexamplebucket1 存储桶。 + 键必须以“user/eric/”开头。 + ACL 必须设置为公共读取。 + success\_action\_redirect 设置为 https://awsexamplebucket1.s3.us-west-1.amazonaws.com/successful\_upload.html。 + 对象是一个图像文件。 + x-amz-meta-uuid 标签必须设置为 14365123651274。 + x-amz-meta-tag 可以包含任意值。 下面是此策略的 Base64 编码版本。 ``` 1. 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 ``` 使用您的凭证创建签名，例如 `0RavWzkygo6QX9caELEqKi9kDbU=` 是先前的策略文档的签名。 以下格式支持对使用此策略的 amzn-s3-demo-bucket 存储桶发出 POST 请求。 ``` 1. 2. 3. ... 4. 5. ... 6. 7. 8. ... 9.
10. Key to upload:
11. 12. 13. Content-Type:
14. 15. Tags for File:
16. 17. 18. 19. File:
20. 21. 22.
23. ... 24. ``` ### 示例请求 此请求假设上传的图像为 117,108 字节；不包括图像数据。 ``` 1. POST / HTTP/1.1 2. Host: awsexamplebucket1.s3.us-west-1.amazonaws.com 3. User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.10) Gecko/20071115 Firefox/2.0.0.10 4. Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 5. Accept-Language: en-us,en;q=0.5 6. Accept-Encoding: gzip,deflate 7. Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 8. Keep-Alive: 300 9. Connection: keep-alive 10. Content-Type: multipart/form-data; boundary=9431149156168 11. Content-Length: 118698 12. 13. --9431149156168 14. Content-Disposition: form-data; name="key" 15. 16. user/eric/MyPicture.jpg 17. --9431149156168 18. Content-Disposition: form-data; name="acl" 19. 20. public-read 21. --9431149156168 22. Content-Disposition: form-data; name="success_action_redirect" 23. 24. https://awsexamplebucket1.s3.us-west-1.amazonaws.com/successful_upload.html 25. --9431149156168 26. Content-Disposition: form-data; name="Content-Type" 27. 28. image/jpeg 29. --9431149156168 30. Content-Disposition: form-data; name="x-amz-meta-uuid" 31. 32. 14365123651274 33. --9431149156168 34. Content-Disposition: form-data; name="x-amz-meta-tag" 35. 36. Some,Tag,For,Picture 37. --9431149156168 38. Content-Disposition: form-data; name="AWSAccessKeyId" 39. 40. AKIAIOSFODNN7EXAMPLE 41. --9431149156168 42. Content-Disposition: form-data; name="Policy" 43. 44. eyAiZXhwaXJhdGlvbiI6ICIyMDA3LTEyLTAxVDEyOjAwOjAwLjAwMFoiLAogICJjb25kaXRpb25zIjogWwogICAgeyJidWNrZXQiOiAiam9obnNtaXRoIn0sCiAgICBbInN0YXJ0cy13aXRoIiwgIiRrZXkiLCAidXNlci9lcmljLyJdLAogICAgeyJhY2wiOiAicHVibGljLXJlYWQifSwKICAgIHsic3VjY2Vzc19hY3Rpb25fcmVkaXJlY3QiOiAiaHR0cDovL2pvaG5zbWl0aC5zMy5hbWF6b25hd3MuY29tL3N1Y2Nlc3NmdWxfdXBsb2FkLmh0bWwifSwKICAgIFsic3RhcnRzLXdpdGgiLCAiJENvbnRlbnQtVHlwZSIsICJpbWFnZS8iXSwKICAgIHsieC1hbXotbWV0YS11dWlkIjogIjE0MzY1MTIzNjUxMjc0In0sCiAgICBbInN0YXJ0cy13aXRoIiwgIiR4LWFtei1tZXRhLXRhZyIsICIiXQogIF0KfQo= 45. --9431149156168 46. Content-Disposition: form-data; name="Signature" 47. 48. 0RavWzkygo6QX9caELEqKi9kDbU= 49. --9431149156168 50. Content-Disposition: form-data; name="file"; filename="MyFilename.jpg" 51. Content-Type: image/jpeg 52. 53. ...file content... 54. --9431149156168 55. Content-Disposition: form-data; name="submit" 56. 57. Upload to Amazon S3 58. --9431149156168-- ``` ### 示例响应 ``` 1. HTTP/1.1 303 Redirect 2. x-amz-request-id: 1AEE782442F35865 3. x-amz-id-2: cxzFLJRatFHy+NGtaDFRR8YvI9BHmgLxjvJzNiGGICARZ/mVXHj7T+qQKhdpzHFh 4. Content-Type: application/xml 5. Date: Wed, 14 Nov 2007 21:21:33 GMT 6. Connection: close 7. Location: https://awsexamplebucket1.s3.us-west-1.amazonaws.com/successful_upload.html?bucket=awsexamplebucket1&key=user/eric/MyPicture.jpg&etag="39d459dfbc0faabbb5e179358dfb94c3" 8. Server: AmazonS3 ``` ## 文本区域上传 **Topics** + [策略和表单构建](#HTTPPOSTExamplesTextAreaPolicy) + [示例请求](#HTTPPOSTExamplesTextAreaRequest) + [示例响应](#HTTPPOSTExamplesTextAreaResponse) 以下示例演示构造策略和表单以上传文本区域的完整过程。上传文本区域对于提交用户创建的内容 (如博客文章) 十分有用。 ### 策略和表单构建 以下策略支持针对 awsexamplebucket1 存储桶将文本区域上传到 Amazon S3。 ``` 1. { "expiration": "2007-12-01T12:00:00.000Z", 2. "conditions": [ 3. {"bucket": "awsexamplebucket1"}, 4. ["starts-with", "$key", "user/eric/"], 5. {"acl": "public-read"}, 6. {"success_action_redirect": "https://awsexamplebucket1.s3.us-west-1.amazonaws.com/new_post.html"}, 7. ["eq", "$Content-Type", "text/html"], 8. {"x-amz-meta-uuid": "14365123651274"}, 9. ["starts-with", "$x-amz-meta-tag", ""] 10. ] 11. } ``` 此策略要求以下内容： + 上传必须在 2007 年 12 月 1 日 12:00 GMT 之前进行。 + 内容必须上传到 awsexamplebucket1 存储桶。 + 键必须以“user/eric/”开头。 + ACL 必须设置为公共读取。 + success\_action\_redirect 设置为 https://awsexamplebucket1.s3.us-west-1.amazonaws.com/new\_post.html。 + 对象是 HTML 文本。 + x-amz-meta-uuid 标签必须设置为 14365123651274。 + x-amz-meta-tag 可以包含任意值。 下面是此策略的 Base64 编码版本。 ``` 1. eyAiZXhwaXJhdGlvbiI6ICIyMDA3LTEyLTAxVDEyOjAwOjAwLjAwMFoiLAogICJjb25kaXR 2. pb25zIjogWwogICAgeyJidWNrZXQiOiAiam9obnNtaXRoIn0sCiAgICBbInN0YXJ0cy13aXRoIiwgIiRrZXkiLCAidXNlci9lcmljLyJd 3. LAogICAgeyJhY2wiOiAicHVibGljLXJlYWQifSwKICAgIHsic3VjY2Vzc19hY3Rpb25fcmVkaXJlY3QiOiAiaHR0cDovL2pvaG5zbWl0a 4. C5zMy5hbWF6b25hd3MuY29tL25ld19wb3N0Lmh0bWwifSwKICAgIFsiZXEiLCAiJENvbnRlbnQtVHlwZSIsICJ0ZXh0L2h0bWwiXSwKI 5. CAgIHsieC1hbXotbWV0YS11dWlkIjogIjE0MzY1MTIzNjUxMjc0In0sCiAgICBbInN0YXJ0cy13aXRoIiwgIiR4LWFtei1tZXRhLXRhZy 6. IsICIiXQogIF0KfQo= ``` 使用您的凭证创建签名。例如，`qA7FWXKq6VvU68lI9KdveT1cWgF=` 是先前的策略文档的签名。 以下格式支持对使用此策略的 amzn-s3-demo-bucket 存储桶发出 POST 请求。 ``` 1. 2. 3. ... 4. 5. ... 6. 7. 8. ... 9.
10. Key to upload:
11. 12. 13. 14. 15. Tags for File:
16. 17. 18. 19. Entry:
24. 25. 26.
27. ... 28. ``` ### 示例请求 此请求假设上传的图像为 117,108 字节；不包括图像数据。 ``` 1. POST / HTTP/1.1 2. Host: awsexamplebucket1.s3.us-west-1.amazonaws.com 3. User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.10) Gecko/20071115 Firefox/2.0.0.10 4. Accept: text/xml,application/xml,application/xhtml+xml,text/html;q=0.9,text/plain;q=0.8,image/png,*/*;q=0.5 5. Accept-Language: en-us,en;q=0.5 6. Accept-Encoding: gzip,deflate 7. Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 8. Keep-Alive: 300 9. Connection: keep-alive 10. Content-Type: multipart/form-data; boundary=178521717625888 11. Content-Length: 118635 12. 13. -178521717625888 14. Content-Disposition: form-data; name="key" 15. 16. ser/eric/NewEntry.html 17. --178521717625888 18. Content-Disposition: form-data; name="acl" 19. 20. public-read 21. --178521717625888 22. Content-Disposition: form-data; name="success_action_redirect" 23. 24. https://awsexamplebucket1.s3.us-west-1.amazonaws.com/new_post.html 25. --178521717625888 26. Content-Disposition: form-data; name="Content-Type" 27. 28. text/html 29. --178521717625888 30. Content-Disposition: form-data; name="x-amz-meta-uuid" 31. 32. 14365123651274 33. --178521717625888 34. Content-Disposition: form-data; name="x-amz-meta-tag" 35. 36. Interesting Post 37. --178521717625888 38. Content-Disposition: form-data; name="AWSAccessKeyId" 39. 40. AKIAIOSFODNN7EXAMPLE 41. --178521717625888 42. Content-Disposition: form-data; name="Policy" 43. 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 44. 45. --178521717625888 46. Content-Disposition: form-data; name="Signature" 47. 48. qA7FWXKq6VvU68lI9KdveT1cWgF= 49. --178521717625888 50. Content-Disposition: form-data; name="file" 51. 52. ...content goes here... 53. --178521717625888 54. Content-Disposition: form-data; name="submit" 55. 56. Upload to Amazon S3 57. --178521717625888-- ``` ### 示例响应 ``` 1. HTTP/1.1 303 Redirect 2. x-amz-request-id: 1AEE782442F35865 3. x-amz-id-2: cxzFLJRatFHy+NGtaDFRR8YvI9BHmgLxjvJzNiGGICARZ/mVXHj7T+qQKhdpzHFh 4. Content-Type: application/xml 5. Date: Wed, 14 Nov 2007 21:21:33 GMT 6. Connection: close 7. Location: https://awsexamplebucket1.s3.us-west-1.amazonaws.com/new_post.html?bucket=awsexamplebucket1&key=user/eric/NewEntry.html&etag=40c3271af26b7f1672e41b8a274d28d4 8. Server: AmazonS3 ```