blocks|key|3892805|text|您可以通过SSL访问文件，如下所示：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3892806|https://s3.amazonaws.com/bucket_name/images/logo.gif|code-block|syntax|javascript|3892807|如果您的存储桶使用自定义域，则可以将S3和CloudFront与您自己的SSL证书一起使用(或者通过Amazon+certificate+Manager生成一个免费证书)：http://aws.amazon.com/cloudfront/custom-ssl-domains/|offset|length|3892808|entityMap|0|LINK|mutability|MUTABLE|url|http://aws.amazon.com/cloudfront/custom-ssl-domains/^0|0|0|2E|1G|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@$I|V|J|W|1|X]]|A|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

You can access your files via SSL like this:

<pre><code>https://s3.amazonaws.com/bucket_name/images/logo.gif
</code></pre>

If you use a custom domain for your bucket, you can use S3 and CloudFront together with your own SSL certificate (or generate a free one via Amazon Certificate Manager): <a href="http://aws.amazon.com/cloudfront/custom-ssl-domains/">http://aws.amazon.com/cloudfront/custom-ssl-domains/</a>

blocks|key|1513522|text|自定义域SSL证书今天刚刚添加，价格为600美元/证书/月。在下面注册您的邀请：http://aws.amazon.com/cloudfront/custom-ssl-domains/|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1513523|更新：新力客户免费提供证书are+now+available。比600美元/月便宜得多，而且XP几乎被淘汰了，它应该可以很好地适用于大多数用例。|style|BOLD|1513524|@skalee+AWS有一个机制来实现发帖者所要求的，“为亚马逊s3存储桶实现SSL”，它被称为CloudFront。我将"implement“读作”使用我的SSL证书“，而不是”只是在HTTP+URL上加一个S，我相信OP可能已经猜到了。“|CODE|1513525|由于CloudFront的价格与S3完全相同($0.12/GB)，但在SSL周围有大量的附加功能，并且允许您在没有额外成本的情况下添加自己的SNI证书，因此它是在您的域上“实现SSL”的明显修复方法。|1513526|entityMap|0|LINK|mutability|MUTABLE|url|http://aws.amazon.com/cloudfront/custom-ssl-domains/|1|http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/SecureConnections.html#cnames-and-https-switch-dedicated-to-sni^0|14|1G|0|0|0|2|D|H|1|0|1C|A|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|D|3|E|5|6|7|10|8|@$A|11|B|12|F|G]]|9|@$A|13|B|14|1|15]]|C|$]]|$1|H|3|I|5|6|7|16|8|@$A|17|B|18|F|J]]|9|@]|C|$]]|$1|K|3|L|5|6|7|19|8|@]|9|@]|C|$]]|$1|M|3|-4|5|6|7|1A|8|@]|9|@]|C|$]]]|N|$O|$5|P|Q|R|C|$S|T]]|U|$5|P|Q|R|C|$S|V]]]]

Custom domain SSL certs were just added today for $600/cert/month. Sign up for your invite below:
<a href="http://aws.amazon.com/cloudfront/custom-ssl-domains/" rel="noreferrer">http://aws.amazon.com/cloudfront/custom-ssl-domains/</a>

Update: SNI customer provided certs <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/SecureConnections.html#cnames-and-https-switch-dedicated-to-sni" rel="noreferrer">are now available</a> for no additional charge. Much cheaper than $600/mo, and with XP nearly killed off, it should work well for most use cases.

@skalee AWS has a mechanism for achieving what the poster asks for, "implement SSL for an Amazon s3 bucket", it's called <code>CloudFront</code>. I'm reading "implement" as "use my SSL certs," not "just put an S on the HTTP URL which I'm sure the OP could have surmised.

Since CloudFront costs exactly the same as S3 ($0.12/GB), but has a ton of additional features around SSL AND allows you to add your own SNI cert at no additional cost, it's the obvious fix for "implementing SSL" on your domain.

blocks|key|5310360|text|我发现您可以通过Cloud+Flare服务轻松完成此操作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5310361|设置存储桶，在存储桶上启用虚拟主机，并通过Cloudflare将所需的CNAME指向该端点...当然还得付服务费。但是5-20美元VS+600美元更容易接受。|5310362|详细信息请点击此处：https://www.engaging.io/easy-way-to-configure-ssl-for-amazon-s3-bucket-via-cloudflare/|offset|length|5310363|entityMap|0|LINK|mutability|MUTABLE|url|https://www.engaging.io/easy-way-to-configure-ssl-for-amazon-s3-bucket-via-cloudflare/^0|0|0|A|2E|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@$F|S|G|T|1|U]]|A|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

I found you can do this easily via the Cloud Flare service. 

Set up a bucket, enable webhosting on the bucket and point the desired CNAME to that endpoint via Cloudflare... and pay for the service of course... but $5-$20 VS $600 is much easier to stomach.

Full detail here:
<a href="https://www.engaging.io/easy-way-to-configure-ssl-for-amazon-s3-bucket-via-cloudflare/" rel="nofollow noreferrer">https://www.engaging.io/easy-way-to-configure-ssl-for-amazon-s3-bucket-via-cloudflare/</a>

blocks|key|1782244|text|如果你真的需要它，考虑重定向。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1782245|例如，在请求assets.my-domain.example.com/path/to/file时，您可以执行301或302重定向到my-bucket-name.s3.amazonaws.com/path/to/file或s3.amazonaws.com/my-bucket-name/path/to/file+(请记住，在第一种情况下，my-bucket-name不能包含任何点，否则它将与S3证书中声明的*.s3.amazonaws.com,+s3.amazonaws.com不匹配)。|offset|length|style|CODE|1782246|没有经过测试，但我相信它会起作用。然而，我几乎看不到什么问题。|1782247|第一个是非常明显的，一个额外的请求来获得这个重定向。我怀疑你可以使用你的域名注册商提供的重定向服务器-你必须以某种方式上传适当的证书-所以你必须使用你自己的服务器。|1782248|第二个是你可以在页面源代码中有你的域名的网址，但是例如当用户在单独的标签中打开图片时，地址栏将显示目标网址。|1782249|entityMap^0|0|6|15|1T|18|32|18|4O|E|5N|10|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@$D|R|E|S|F|G]|$D|T|E|U|F|G]|$D|V|E|W|F|G]|$D|X|E|Y|F|G]|$D|Z|E|10|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|11|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|12|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|13|8|@]|9|@]|A|$]]|$1|N|3|-4|5|6|7|14|8|@]|9|@]|A|$]]]|O|$]]

If you really need it, consider redirections.

For example, on request to <code>assets.my-domain.example.com/path/to/file</code> you could perform a 301 or 302 redirection to <code>my-bucket-name.s3.amazonaws.com/path/to/file</code> or <code>s3.amazonaws.com/my-bucket-name/path/to/file</code> (please remember that in the first case <code>my-bucket-name</code> cannot contain any dots, otherwise it won't match <code>*.s3.amazonaws.com, s3.amazonaws.com</code> stated in S3 certificate).

Not tested, but I believe it would work. I see few gotchas, however.

The first one is pretty obvious, an additional request to get this redirection. And I doubt you could use redirection server provided by your domain name registrar — you'd have to upload proper certificate there somehow — so you have to use your own server for this.

The second one is that you can have urls with your domain name in page source code, but when for example user opens the pic in separate tab, then address bar will display the target url.

blocks|key|3892954|text|直接使用S3是不可能的，但您可以从您的存储桶创建云前端分发。然后转到证书管理器并申请证书。亚马逊免费提供这些服务。如果您已成功确认认证，请将其分配给您的Cloud+Front分发。还要记住将规则设置为将http重定向到https。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3892955|我在亚马逊S3上托管了几个静态网站，比如我的个人网站，我已经分配了SSL证书，因为他们有云前端分发。|3892956|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

It is not possible directly with S3, but you can create a Cloud Front distribution from you bucket. Then go to certificate manager and request a certificate. Amazon gives them for free. Ones you have successfully confirmed the certification, assign it to your Cloud Front distribution. Also remember to set the rule to re-direct http to https. 

I'm hosting couple of static websites on Amazon S3, like my personal website to which I have assigned the SSL certificate as they have the Cloud Front distribution.

blocks|key|5310414|text|如前所述，您不能为S3存储桶创建免费证书。但是，您可以创建Cloud+Front分布，然后为Cloud+Front分配证书。您为您的域申请证书，然后将其分配到Cloud+Front设置中的Cloud+Front分发。我已经使用这种方法通过SSL为静态网站提供服务，以及提供静态文件。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|5310415|对于静态网站的创建来说，亚马逊是个不错的选择。这是真正负担得起的静态网站与SSL。|5310416|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

As mentioned before, you cannot create free certificates for S3 buckets. However, you can create Cloud Front distribution and then assign the certificate for the Cloud Front instead. You request the certificate for your domain and then just assign it to the Cloud Front distribution in the Cloud Front settings. I've used this method to serve static websites via SSL as well as serve static files.

For static website creation Amazon is the go to place. It is really affordable to get a static website with SSL.

I am using an Amazon S3 bucket for uploading and downloading of data using my .NET application. Now my question is: I want to access my S3 bucket using SSL. Is it possible to implement SSL for an Amazon s3 bucket?

How to Configure SSL for Amazon S3 bucket

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在使用亚马逊S3存储桶通过我的.NET应用程序上传和下载数据。现在我的问题是:我想使用SSL访问我的S3存储桶。有没有可能为亚马逊s3存储桶实现SSL？

问如何为亚马逊S3存储桶配置SSL
EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何为亚马逊S3存储桶配置SSLEN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何为亚马逊S3存储桶配置SSL
EN