S3 GET without Signing (Cleartext possible?)

Question

Is there a way to GET a object from Amazon S3 by sending the cleartext Accesskey:Secret instead of signing/HMAC?

Answer 1

Not unless the ACL is set for anonymous read access.

Answer 2

Another option would be to use Amazon S3 query string authentication with your URL. Most Amazon S3 clients can generate that.

You can also use an S3fm, an online file manager for Amazon S3. Just select Web URL in your context menu and generate an URL with an expiration date.