Question 95485 in Amazon Web Sevices Question posted in
The official Amazon Web Services documentation can be found here.

Query on upload to s3 bucket NodeJS – Amazon web services

I have one doubt about the s3 bucket; while uploading data to the s3 bucket using the upload function from aws-sdk in NodeJS, is data uploaded securely using TLS?

Tags:

2

Answers


  1. 0

    Node.js 12 and later use a minimum version of OpenSSL 1.1.1b, which supports TLS 1.3. The AWS SDK for JavaScript v3 defaults to use TLS 1.3 when available, but defaults to a lower version if required.

    To get the current version of TLS used by Node.js on your machine, start the Node shell and run the following script:

    const tls = require("tls")
tlsSocket = new tls.TLSSocket()
protocol = tlsSocket.getProtocol()
console.log(protocol)

    References:

    Login or Signup to reply.
  2. 0

    You can enforce your bucket to accept only TLS connections by adding the following bucket policy,

    {
  "Id": "ExamplePolicy",
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AllowSSLRequestsOnly",
      "Action": "s3:*",
      "Effect": "Deny",
      "Resource": [
        "arn:aws:s3:::YOUR-BUCKET",
        "arn:aws:s3:::YOUR-BUCKET/*"
      ],
      "Condition": {
        "Bool": {
          "aws:SecureTransport": "false"
        }
      },
      "Principal": "*"
    }
  ]
}
    Login or Signup to reply.
Please signup or login to give your own answer.

Back To Top
Search