S3 Auth: SigV4, Presigned URLs, and Key Decoupling
Query-string SigV4 for presigned URLs, mandatory X-Amz-Date freshness, and decoupling gateway access/secret keys from the native auth token.
Sigv4
Signed Payloads and Server-Sent Events for S3
SigV4 signed payload verification for S3 PUT/POST and Server-Sent Events for async operation notifications.
AWS Chunked Streaming: Signed Payloads Without Buffering
aws-chunked payload encoding streams large S3 uploads in signed chunks — no full-body buffering, per-chunk SigV4 integrity.