Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Recommend best practices in README #28

Open
TomFrost opened this issue Sep 8, 2015 · 0 comments
Open

Recommend best practices in README #28

TomFrost opened this issue Sep 8, 2015 · 0 comments

Comments

@TomFrost
Copy link

TomFrost commented Sep 8, 2015

From the README:

Note that, if you use Npdynamodb on any browsers, It has a security issue. Because AccessKey and SecretAccessKey for DynamoDB can be seen from public. We recommend you only using it for private or readonly projects which is not including any privacy informations.

This is misleading. The recommended way to interact with AWS from the frontend is to assume an IAM role and get temporary AWS credentials through Amazon STS. Cognito provides a very simple user-based way to make this happen, and allows public frontend applications to use AWS services directly and with finely-controlled security.

Thanks for picking up where Vogels left off and making this function on the frontend!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant