Presign Pad

Sign AWS requests locally. Secrets are kept only in memory unless you save them (see Profile).

Profile

Profiles are saved only in this browser (localStorage). Nothing is uploaded.

Also save my secret key and session token in this browser (unencrypted, readable by anything on this origin)

Method Host Path Query Region Service Date (YYYYMMDDTHHMMSSZ, blank = now) Expires, presign only (seconds) Access key ID Secret key Session token Headers (one "Name: value" per line; Host is added for you) Body Unsigned payload (S3)

Send needs the server to allow CORS from a file:// page. S3 buckets usually do not, so a "network error" can mean CORS rather than a bad signature. Use curl then paste the response below.

Output

Canonical request

String to sign

Signature

Authorization header

Presigned URL

curl

Failure response

Inspect a presigned URL

Secret key (optional, only to verify the signature; not saved)

Presign Pad

Output

Canonical request Copy

String to sign Copy

Signature Copy

Authorization header Copy

Presigned URL Copy

curl Copy curl