Ah thanks !
Pre-signed URLs'
That is a further complexity.
I believe pre-signed S3 URLS are one of the most useful or required features of 
AWS as they transition to more IAM authentication for services.  Could you 
outline what your needs are for Presigned URLs ? I won't have a solution for 
you immediately ( XQuery is no easier or harder to implement this )  but 
looking for a RFE it would be good to have customer feedback.
e.g.
Is this only for S3 ?   Or other services ?
Where do you get the credentials ? (Do you have the access key/secret key in 
plain text ? )
Do you want/need to make use of the IAM role associated with an EC2 instance ?
Is ML on an EC2 instance or remote ?
Are you using temporary or federated credentials as your source ?


Thanks.



-----------------------------------------------------------------------------
David Lee
Lead Engineer
MarkLogic Corporation
d...@marklogic.com
Phone: +1 812-482-5224
Cell:  +1 812-630-7622
www.marklogic.com<http://www.marklogic.com/>

From: general-boun...@developer.marklogic.com 
[mailto:general-boun...@developer.marklogic.com] On Behalf Of Pavadaidurai A
Sent: Wednesday, August 19, 2015 7:46 AM
To: MarkLogic Developer Discussion <general@developer.marklogic.com>
Subject: Re: [MarkLogic Dev General] Marklogic Xquery library for AWS signature 
version 4

Hi David,

Thanks for your response! The application I support has been designed with 
XQMVC framework. I am aware of the fact that Marklogic APIs can access S3. But 
whoever designed the application, decided to create the pre-signed S3 urls for 
the customers to download their files.

The idea is that the load is now delegated to S3, since pre-signed urls 
directly hit S3 instead of hitting Marklogic server. S3 provides libraries for 
languages like Java, dotnet etc.

But for Xquery there is no library available, to create the pre-signed S3 urls. 
Hence seeking help in this forum.

Thanks,
Durai.

From: 
general-boun...@developer.marklogic.com<mailto:general-boun...@developer.marklogic.com>
 [mailto:general-boun...@developer.marklogic.com] On Behalf Of David Lee
Sent: Wednesday, August 19, 2015 5:03 PM
To: MarkLogic Developer Discussion
Subject: Re: [MarkLogic Dev General] Marklogic Xquery library for AWS signature 
version 4

Signature V4 is not required in most regions yet.  What region are you 
accessing ?
The next maintained release of ML 7x and 8x will use Signature V4 for all S3 
access.
Did you know you can use "s3://" URI's for S3 access anywhere a 'file' is 
normally used in ML instead of having to do your own HTTP call ? Where possible 
I recommend converting to using ML's internal S3 support, its more efficient 
and will be maintained as requirements  and API's evolve.

We are looking into exposing the signing algorithm as an API,  it shouldn't be 
much different than the current XQuery code in 'ec2-2009-11-30.xqy' , however 
signing is a bit tedious to get absolutely correct in any language.


-----------------------------------------------------------------------------
David Lee
Lead Engineer
MarkLogic Corporation
d...@marklogic.com<mailto:d...@marklogic.com>
Phone: +1 812-482-5224
Cell:  +1 812-630-7622
www.marklogic.com<http://www.marklogic.com/>

From: 
general-boun...@developer.marklogic.com<mailto:general-boun...@developer.marklogic.com>
 [mailto:general-boun...@developer.marklogic.com] On Behalf Of Aroul, Pavadai 
Durai (ELS-CON)
Sent: Wednesday, August 19, 2015 6:57 AM
To: general@developer.marklogic.com<mailto:general@developer.marklogic.com>
Subject: [MarkLogic Dev General] Marklogic Xquery library for AWS signature 
version 4

Hello everyone,

I am currently with Marklogic version 7 hosted in a cloud environment. I have 
an xquery to create a pre-signed url for “GET method” using AWS signature 
version 2 which uses SHA1 hashing algorithm. But I am planning to upgrade the 
process to AWS signature version 4, since newer S3 accounts support only AWS 
signature version 4.

Do any of you have xquery code/library to create the pre-singed urls using AWS 
signature version 4 as described in the below link. It seems the newer S3 
accounts support only AWS signature version 4 and not 2. If any of you can 
share the code in GIThub, it would be very helpful.

http://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html#RESTAuthenticationQueryStringAuth

Thanks,
Durai.


**************** CAUTION - Disclaimer *****************

This e-mail contains PRIVILEGED AND CONFIDENTIAL INFORMATION intended solely

for the use of the addressee(s). If you are not the intended recipient, please

notify the sender by e-mail and delete the original message. Further, you are 
not

to copy, disclose, or distribute this e-mail or its contents to any other 
person and

any such actions are unlawful. This e-mail may contain viruses. Infosys has 
taken

every reasonable precaution to minimize this risk, but is not liable for any 
damage

you may sustain as a result of any virus in this e-mail. You should carry out 
your

own virus checks before opening the e-mail or attachment. Infosys reserves the

right to monitor and review the content of all messages sent to or from this 
e-mail

address. Messages sent to or from this e-mail address may be stored on the

Infosys e-mail system.

***INFOSYS******** End of Disclaimer ********INFOSYS***


_______________________________________________
General mailing list
General@developer.marklogic.com
Manage your subscription at: 
http://developer.marklogic.com/mailman/listinfo/general

Reply via email to