Early access

Sign one AWS request. See why it fails. Nothing else to set up.

Presign Pad is a small browser tool for AWS SigV4 requests and S3 presigned URLs. Paste the error XML from a failed request and see exactly which line differs from what the tool computed.

The free part works today. We'll email you once when paid plans open.

Presign Pad screenshot

The problem

You just need one signed request

A full API client is too much.

A signing mistake only shows up after you send

Then you get a vague 403 and have to guess.

Presigned S3 URLs are easy to get slightly wrong

A bad header, region or timestamp breaks them.

You don't want to paste your AWS keys into a tool that syncs them to a cloud workspace.

What it does

Sign requests with SigV4 and create S3 presigned URLs.

Paste a SignatureDoesNotMatch error XML and see a line-by-line diff against the canonical request and string to sign the tool computed.

Get a plain-words cause for AccessDenied, ExpiredToken, RequestTimeTooSkewed, AuthorizationQueryParametersError and ExpiredRequest.

Inspect any presigned URL: credential scope, date, expiry, time left, signed headers and warnings. Add your secret to check if the signature matches.

Save signing profiles on your own machine

The secret is saved only if you tick a box.

Copy a signed request as a curl command, or as an AWS CLI presign command for S3 GET URLs.

Pricing

Simple, no surprises.

Free

$0/month

  • SigV4 request signing
  • S3 presigned URL generation
  • Runs in your browser with no account
  • Nothing sent anywhere by the signing code

Pro

$5/month

  • Everything in Free
  • Failure explainer with a line-by-line diff of S3 error XML
  • Plain-words causes for common AWS error codes
  • Presigned URL inspector with expiry and warnings
  • Saved signing profiles stored locally
  • Copy as curl or AWS CLI presign command

Pro Yearly

$48/year

  • Everything in Pro
  • Billed once a year

Questions

Do I need an account?

No. There is no login and no cloud sync. Presign Pad runs in your browser.

Where do my keys go?

Nowhere. The signing and explaining code makes no network calls. Your secret stays in memory unless you tick the box to save it in your browser's local storage. A warning shows when you do.

What is free and what does paying unlock?

Free covers SigV4 signing and S3 presigned URLs. Pro adds the failure explainer, the presigned URL inspector, saved profiles and curl or AWS CLI export. Pro Yearly has the same features, billed once a year.

Which services does it support?

AWS SigV4 requests and S3 presigned URLs. It does not sign for other clouds, and it does not do SigV4a.

Is it a Postman replacement?

No. It does one job: sign AWS requests and explain why they fail. It has no collections, environments, scripting or team features.

How do I check its output?

The README lists manual steps to compare the signature with the AWS CLI. We suggest you run them before you rely on it.