Hacker News new | ask | show | jobs
by kennu 3966 days ago
You can use Amazon's IAM Web Identity Federation and grant access to resources only for users that have signed in with Google, Facebook etc. with approved user identifiers.

http://docs.aws.amazon.com/AWSJavaScriptSDK/guide/browser-co...

So basically, instead of embedding the AWS access keys in HTML, you use AWS.config.credentials = new AWS.WebIdentityCredentials(...) with the OAuth access tokens you get from Google or Facebook.