Quick, dirty Python script that spits out a signed url for Amazon S3

s3signurl.py

#!/usr/bin/env python
import optparse
import sys

from boto.s3.connection import S3Connection

def sign(bucket, path, access_key, secret_key, https, expiry):
    c = S3Connection(access_key, secret_key)
    return c.generate_url(
        expires_in=long(expiry),
        method='GET',
        bucket=bucket,
        key=path,
        query_auth=True,
        force_http=(not https)
    )

if __name__ == '__main__':
    parser = optparse.OptionParser()
    parser.add_option('-b', '--bucket', dest='bucket', help='S3 bucket containing the file')
    parser.add_option('-p', '--path', dest='path', help='Path to the file (relative to the bucket)')
    parser.add_option('-a', '--access-key', dest='access_key', help='Your AWS Access Key ID')
    parser.add_option('-s', '--secret-key', dest='secret_key', help='Your AWS secret key')
    parser.add_option('--no-https', dest='https', action='store_false', default=True, help='Disable serving over HTTPS')
    parser.add_option('--expiry', dest='expiry', default='631138519', help='Expiry time, in seconds (defaults to two years)')
    
    options, args = parser.parse_args()
    
    for opt in ('bucket', 'path', 'access_key', 'secret_key'):
        assert options.__dict__.get(opt), '%s is not optional' % opt
    
    print sign(
        bucket=options.bucket,
        path=options.path,
        access_key=options.access_key,
        secret_key=options.secret_key,
        https=options.https,
        expiry=long(options.expiry)
    )
    sys.exit(0)

Gee. thanks. Exactly what I was looking for.

Thank you so much!

If you use the Frankfurt endpoint you will get an error: "Please use AWS4-HMAC-SHA256"

Some modifications are needed, see here: https://gist.github.com/manelclos/51b2bfbd6195f1052eae

Thanks a bunch.

Looks like expiry is in 10th of seconds and not seconds.

Thanks, it helped me as well.

I assume I can drop the access key and secret key incase I am using an ec2 that has a role contains permission to sign urls for specific S3 buckets ?