Keeping Your Secrets Between Cloud Object Storage and Your Browser (Part 1)

Upload edition

Glynn Bird
Mar 12, 2018 · 6 min read
Masking object storage credentials with a serverless function works well! There’s an upload size limit though.

Pre-Signed URLs to the rescue

Our roll-your-own-Instagram app’s pre-signed URLs let the app safely talk directly to Object Storage.

Sign up for IBM Cloud Object Storage

Setting the HMAC param to true enables S3-style authentication for our IBM Cloud Object Storage instance.

Set up CORS

Let’s see the code

Deploying to IBM Cloud Functions

Making a web front end

Get in the zone! (Screenshot of the drop zone example app.)

Summary

IBM CODAIT

Things we made with data at IBM’s Center for Open Source Data and AI Technologies.

Thanks to Mike Broberg and Teri Chadbourne.

Glynn Bird

Written by

Developer @ IBM. https://glynnbird.com

IBM CODAIT

Things we made with data at IBM’s Center for Open Source Data and AI Technologies.