以下是一个关于如何使用Amazon S3 Rest API的代码示例,展示了一些最佳实践:
import requests
import hashlib
import hmac
import base64
import datetime
access_key = 'YOUR_AWS_ACCESS_KEY'
secret_key = 'YOUR_AWS_SECRET_KEY'
def sign(key, msg):
return hmac.new(key, msg.encode('utf-8'), hashlib.sha256).digest()
def get_signature_key(key, date_stamp, region_name, service_name):
k_date = sign(('AWS4' + key).encode('utf-8'), date_stamp)
k_region = sign(k_date, region_name)
k_service = sign(k_region, service_name)
k_signing = sign(k_service, 'aws4_request')
return k_signing
def send_request(method, url, payload=None, headers=None):
if headers is None:
headers = {}
headers['Host'] = 's3.amazonaws.com'
headers['x-amz-content-sha256'] = hashlib.sha256((payload or '').encode('utf-8')).hexdigest()
headers['x-amz-date'] = datetime.datetime.utcnow().strftime('%Y%m%dT%H%M%SZ')
canonical_uri = url
canonical_querystring = ''
canonical_headers = ''.join(k.lower() + ':' + headers[k].strip() + '\n' for k in sorted(headers))
signed_headers = ';'.join(k.lower() for k in sorted(headers))
payload_hash = headers['x-amz-content-sha256']
canonical_request = '\n'.join([method, canonical_uri, canonical_querystring, canonical_headers, signed_headers, payload_hash])
algorithm = 'AWS4-HMAC-SHA256'
credential_scope = datetime.datetime.utcnow().strftime('%Y%m%d') + '/us-east-1/s3/aws4_request'
string_to_sign = '\n'.join([algorithm, headers['x-amz-date'], credential_scope, hashlib.sha256(canonical_request.encode('utf-8')).hexdigest()])
signing_key = get_signature_key(secret_key, datetime.datetime.utcnow().strftime('%Y%m%d'), 'us-east-1', 's3')
signature = hmac.new(signing_key, (string_to_sign).encode('utf-8'), hashlib.sha256).hexdigest()
headers['Authorization'] = algorithm + ' ' + 'Credential=' + access_key + '/' + credential_scope + ', ' + 'SignedHeaders=' + signed_headers + ', ' + 'Signature=' + signature
response = requests.request(method, 'https://s3.amazonaws.com' + url, data=payload, headers=headers)
return response
# 示例:创建一个名为"my-bucket"的存储桶
response = send_request('PUT', '/my-bucket')
print(response.text)
# 示例:上传一个名为"my-file.txt"的文件到存储桶中
file_content = 'Hello, World!'
response = send_request('PUT', '/my-bucket/my-file.txt', payload=file_content)
print(response.text)
# 示例:获取存储桶中的文件列表
response = send_request('GET', '/my-bucket')
print(response.text)
请注意,这只是一个简单的示例代码,您可能需要根据您的具体需求进行更多的修改和调整。此外,为了安全起见,建议将访问密钥存储在一个安全的位置,而不是直接在代码中硬编码。