How safe is it to call Amazon S3 Services with iPhone?

Question

I want to make calls to the Amazon S3 rest API through the iPhone app. This means that I will need to write secretAccessKey and accessKey Amazon S3 services in my iPhone application.

If my application enters the AppStore, will it be dangerous for me? Maybe some people will extract my secret key and my key to use it for other purposes? Is there a way to protect my application from this kind of attack?

Thanks!

Martin

Answer 1

If possible, you should not store your keys in your application.

You can see a lengthy discussion of the topic here: Architectural question and the question of downloading photos from the iPhone and S3 application (check Adrian Petrescu’s answer).

There are a couple of options here. First upload the data to the central server, and then to S3. Your keys remain private on your server. Or you can look at assigning your urls.