Menu
Amazon DevPay
Developer Guide (API Version 2007-12-01)

Amazon S3 POST with Desktop Products

Amazon Simple Storage Service users can upload content directly to Amazon S3 using a web browser and a POST request. For complete information about the Amazon S3 POST feature, see the section on browser-based uploads using POST in the Amazon Simple Storage Service Developer Guide.

Caution

The Amazon S3 POST feature is designed for use by web products, not desktop products. Although it's technically possible that your desktop product could use the feature, we strongly discourage it because it's a less secure way for your desktop product to put data in a customer's bucket. An Amazon S3 POST by your desktop product exposes the product token in clear text, enabling anyone to get the product token and use it maliciously to your detriment. Using a regular PUT call instead doesn't expose the product token in clear text, making it the more secure option. Web products can do a POST without including the product token if they're using a user token created after May 15, 2008. Desktop products cannot.

If you have a desktop product but still want to use the Amazon S3 POST feature, we recommend you enable a server to run a web (hosted) interface to your product, set up the server to handle Amazon S3 POSTs, and have your customers use that web interface. Thereafter, to use your product, the customers could use their desktop client or the web interface (their subscription covers both). In this case, you need to activate the customer's use of the product twice: once with ActivateDesktopProduct (for use with the desktop client) and once with ActivateHostedProduct (for use with the web interface). For more information about creating a DevPay web product, see Setting Up Web Products. For information about using an Amazon S3 POST with a web product, see Amazon S3 POST with Web Products.