[thelist] Amazon S3 for serving video: restricting permissions

[Bill Moseley]

On Sat, Aug 29, 2009 at 12:51 PM, Joel Canfield<joel at bizba6.com> wrote:
> Now, HOW I do that, I really don't care. Query String Auth seems like the
> tool they've provided, but I just plain don't understand their examples:
> sure, I now have an HTTP connection. Okay, I'm a simple web developer, I
> don't know what to DO with that HTTP connection.

Your web pages need to be dynamic (i.e. run code when they are
fetched).  When an authorized user
wants to see a video you create a URL pointing to Amazon that's only
valid for a small number of seconds.  Embed that URL in your page that
links to the video.  User's browser fetches the video from Amazon.  If
they view source and save the URL it won't be much use to them or
anyone else because it will be expired.

Did you look at any of these example?

http://developer.amazonwebservices.com/connect/message.jspa?messageID=132740

I would imagine that PHP or Perl would have modules to build the
signed and time-limited URL, but haven't looked.  Amazon is a big name
space on CPAN from my quick search.



-- 
Bill Moseley
moseley at hank.org