Amazon S3 secure access from flash

Question

I am trying to access files in Amazon S3 bucket with SSL with ActionScript3.

When I use this format...

https://s3.amazonaws.com/bucket.name/filename

I get security sandbox error. "Error #2048: Security sandbox violation: "

When I switch to this format...

https://bucket.name.s3.amazonaws.com/filename

It works like a charm (until I try it on a browser other than Firefox). It generates a certificate error (host name mismatch) for the other browsers. Once I add exceptions it works fine. But that's not practical.

Third option which would be the ideal version...

https://www.myowndomain.com/filename

... generates the same security violation for all browsers. Needless to say, the domain is mapped to the bucket.

The bucket has its own crossdomain.xml.

The files are custom binary files.

<cross-domain-policy>
<allow-access-from domain="*" secure="false"/>
<site-control permitted-cross-domain-policies="all"/>
</cross-domain-policy>

I went thru the security white paper and new rules for Flash Player 10. No luck so far.

Any ideas?

---

Ok it gets more interesting, and I suspect this is causing the problem. While sanitizing the name of my bucket, I oversimplified. My bucket name has a dot in it and appearently it is not a good thing.

http://faindu.wordpress.com/2008/12/18/amazon-s3-flash-crossdomainxml-ie7-certifacte-error/

So I would appreciate it, if there is an alternative to that.

Answer 1

This is due to browser restrictions. Also, if you trying to access S3 from AS3 then you'll probably fine the AS3 API quite useful though this too runs into browser restrictions:

This is an AS3 library for accessing Amazon's S3 service. It only works in Apollo because of restrictions in the browser player.

Answer 2

During your troubleshooting, did you enable the Flash Player's policy file logging feature? You can get more specific information behind the sandbox violation error. Read the following to learn how to set up policy file logging: Policy file changes in Flash Player 9 and Flash Player 10

Personally, I suspect you should be able to get your third option to work, at least, since you'd be able to host a crossdomain.xml at the root location of https://www.myowndomain.com/crossdomain.xml -- but let's see what you have in your crossdomain.xml. I suggest you post a copy here, sanitized if necessary. And, tell us, what kind of files are you trying to load in the player?