@aws-sdk/signature-v4

What is @aws-sdk/signature-v4?

@aws-sdk/signature-v4 is a package from the AWS SDK for JavaScript that provides functionality to sign AWS requests using the Signature Version 4 signing process. This is essential for securely making authenticated requests to AWS services.

What are @aws-sdk/signature-v4's main functionalities?

Signing HTTP Requests

This feature allows you to sign HTTP requests to AWS services using the Signature Version 4 signing process. The code sample demonstrates how to sign a GET request to an S3 bucket.

const { SignatureV4 } = require('@aws-sdk/signature-v4');
const { Sha256 } = require('@aws-crypto/sha256-js');
const { HttpRequest } = require('@aws-sdk/protocol-http');

const signer = new SignatureV4({
  service: 's3',
  region: 'us-east-1',
  credentials: {
    accessKeyId: 'AKID',
    secretAccessKey: 'SECRET'
  },
  sha256: Sha256
});

const request = new HttpRequest({
  method: 'GET',
  hostname: 'examplebucket.s3.amazonaws.com',
  path: '/exampleobject'
});

signer.sign(request).then(signedRequest => {
  console.log(signedRequest);
});

Presigning URLs

This feature allows you to generate presigned URLs for AWS services, which can be used to grant temporary access to resources. The code sample demonstrates how to presign a URL for an S3 object.

const { S3RequestPresigner } = require('@aws-sdk/s3-request-presigner');
const { HttpRequest } = require('@aws-sdk/protocol-http');
const { Hash } = require('@aws-sdk/hash-node');
const { formatUrl } = require('@aws-sdk/util-format-url');

const presigner = new S3RequestPresigner({
  credentials: {
    accessKeyId: 'AKID',
    secretAccessKey: 'SECRET'
  },
  region: 'us-east-1',
  sha256: Hash.bind(null, 'sha256')
});

const request = new HttpRequest({
  method: 'GET',
  hostname: 'examplebucket.s3.amazonaws.com',
  path: '/exampleobject'
});

presigner.presign(request).then(presignedUrl => {
  console.log(formatUrl(presignedUrl));
});

Other packages similar to @aws-sdk/signature-v4

aws4

The aws4 package is a lightweight library for signing AWS requests with Signature Version 4. It is simpler and has fewer dependencies compared to @aws-sdk/signature-v4, making it a good choice for smaller projects or environments with limited resources.

aws-signature-v4

The aws-signature-v4 package is another library for signing AWS requests using Signature Version 4. It is designed to be compatible with both Node.js and browser environments, similar to @aws-sdk/signature-v4, but it may not be as feature-rich or tightly integrated with the AWS SDK.

README

@aws-sdk/signature-v4

Changelog

3.40.0 (2021-11-05)

Bug Fixes

• config-resolver: resolve region first from regionHash (#2969) (55f4e85)
• node-config-provider: move booleanSelector util to platform agnostic package (#2992) (2909c7b)

Features

• client-nimble: change StudioComponentConfiguration from union to structure (#2971) (049533d)
• client-nimble: update model as of 11/02/2021 (#2976) (47d2a6c)
• client-s3-control: support FIPS in S3 Outposts Control Plane (#2985) (41d3762)
• clients: populate variants in endpoints hashes (#2974) (0dd68ef)
• clients: update clients as of 2021/11/05 (#2994) (f5ecc31)
• config-resolver: resolve hostname from variants (#2980) (447580b)
• config-resolver: use real region in configuration (#2986) (af5b00e)
• karma-credential-loader: mark package as private (#2959) (a9ad7f6)