Amazon AWS in browser security and alternatives -


I am creating an application that saves S3, Dynamody, and SNS (like other SWS services) Other than) is going to use. What was with me in my mind, that we can connect to the browser directly with these services and leave the need for a proxy server that I used to map between the client and these services. My concerns are:

  • The customer (browser) will know that the use of the data source / services is Amazon AWS, and further, if not properly configured, for unwanted intruders Do not open all the doors
  • Not all browsers are expected to be ready for the CORS
  • Using services like Dynamo DDB, SNS extends a lot of details for the needs of the customers Will be That all database fields we have been using, enter what kind of data / read what is sent notifications, etc.
  • Authentication provided for the ADS Browser SDK depends on Facebook, Google, and Amazon, but my requirement is always to authenticate the user, and even if there is also authentication This will not be the provider.

    Therefore, with these concerns, my question is whether we have AWS and customers, or any other safe option available.

    I think you are looking at all the services directly on those services with another interactive client . I do not see any experiment, where you will give Dynomodi or RDS as direct access to your customer and you will need to be worried about weaknesses, instead you will essentially create a web application which is an EC2 The example will be out and connecting to the Dynamo DDB, you are just going to issue a URL, through which the customer is using it through the browser To be reached.

    These are institutions that are provided by Amazon for security / implementation of security.

  • Security Group (EC2, RDS, Redshift etc)
    • VPC (For EC2, RDS, Dynamo DD, RedShift etc)
    • Subnet, ACL (VPC)

      All your questions is that your custom Use the application as a cover that uses all the services and only displays your web application via https.

Comments

Popular posts from this blog

ios - Adding an SKSpriteNode to SKScene from a child SKSpriteNode -

Matlab transpose a table vector -

c# - Textbox not clickable but editable -