com.boomi.common.aws

Class AWSV4Signer

java.lang.Object

com.boomi.common.aws.AWSV4Signer

public final class AWSV4Signer
extends Object

This class encapsulates the code to sign an Amazon SQS request for AWS Signature Version 4 Signature Version 4 is the process to add authentication information to AWS requests. For security, most requests to AWS must be signed with an access key, which consists of an access key ID and secret access key.

You can add the authentication information to the request with an Authorization header. Although the HTTP header is named Authorization, the signing information is actually used for authentication to establish who the request came from

The Authorization header includes the following information:

Algorithm you used for signing (AWS4-HMAC-SHA256)

Credential scope (with your access key ID)

List of signed headers

Calculated signature. The signature is based on your request information, and you use your AWS secret access key to produce the signature. The signature confirms your identity to AWS. https://docs.aws.amazon.com/general/latest/gr/sigv4_signing.html

Method Summary

Modifier and Type	Method and Description
static void	sign(AWSSignableRequest request) Creates the sign string needed to authenticate an Amazon AWS request on Version 4 and passes it back by an invokation to AWSSignableRequest.sign(String).

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

sign

public static void sign(AWSSignableRequest request)
                 throws AWSSignatureException

Creates the sign string needed to authenticate an Amazon AWS request on Version 4 and passes it back by an invokation to AWSSignableRequest.sign(String). In order to create the signature, this method must read AWSSignableRequest.getPayload(). After the stream is read, it will be InputStream.reset(). This behavior is different from 1.0.x versions of this library which did NOT reset the stream. TODO this method should probably not be static.. instead it should implement an instance method from a "signer" interface so that we can swap signature versions. there's also an opportunity to clean this method up a bit. started with SignatureRequest but moving everything there will reduce this method to practically nothing...

Parameters:

request - an AWSSignableRequest with the request values to generate the signature and sign it with the generated key

Throws:

AWSSignatureException