Description
Describe the feature
As described in AWS blog post, you can hook into the SigV4 process to add custom query parameters to the generated presigned URLs.
As in the scenario of that blog post, this is incredibly useful to create per-requestor Presigned URLs and have that traceability in the access logs for those objects in Cloudtrail.
Today, the only (theoretical) way to accomplish that is through creating an entirely custom v4(a) Presigner and providing that to an S3 Presigner Client - which is thoroughly discouraged by AWS' User Guides.
Because of the complex nature of v4, I don't think it advisable to roll your own. Just as an example, getting the right keys is something internal to the module today and doing it yourself is ripe with peril.
I think, perhaps, the simplest way to support a feature like this is adding something like a RequestOptionFunc to SignHTTP to allow a caller to modify an input request (at their own risk) - or a more specific SignOption that adds a map of string-to-string query parameters to the request before adding necessary signing parameters.
Use Case
Adding custom query params for requestor logging like that described in AWS blog post without needing to roll your own v4 presigner (which is heavily discouraged by AWS)
Proposed Solution
I think, perhaps, the simplest way to support a feature like this is adding something like a RequestOptionFunc to SignHTTP to allow a caller to modify an input request (at their own risk) - or a more specific SignOption that adds a map of string-to-string query parameters to the request before adding necessary signing parameters.
Other Information
No response
Acknowledgements
- I may be able to implement this feature request
- This feature might incur a breaking change
AWS Go SDK V2 Module Versions Used
github.com/aws/[email protected]
github.com/aws/aws-sdk-go-v2/aws/protocol/[email protected]
github.com/aws/aws-sdk-go-v2/[email protected]
github.com/aws/aws-sdk-go-v2/[email protected]
github.com/aws/aws-sdk-go-v2/feature/ec2/[email protected]
github.com/aws/aws-sdk-go-v2/feature/s3/[email protected]
github.com/aws/aws-sdk-go-v2/internal/[email protected]
github.com/aws/aws-sdk-go-v2/internal/endpoints/[email protected]
github.com/aws/aws-sdk-go-v2/internal/[email protected]
github.com/aws/aws-sdk-go-v2/internal/[email protected]
github.com/aws/aws-sdk-go-v2/service/internal/[email protected]
github.com/aws/aws-sdk-go-v2/service/internal/[email protected]
github.com/aws/aws-sdk-go-v2/service/internal/[email protected]
github.com/aws/aws-sdk-go-v2/service/internal/[email protected]
github.com/aws/aws-sdk-go-v2/service/[email protected]
github.com/aws/aws-sdk-go-v2/service/[email protected]
github.com/aws/aws-sdk-go-v2/service/[email protected]
github.com/aws/aws-sdk-go-v2/service/[email protected]
github.com/aws/[email protected]
Go version used
go version go1.23.3 darwin/arm64