REST Request Authentication

The Authorization header in REST requests contains the authentication information. The header must contain a string of the following format:

AWS <AWSAccessKeyId>:<Signature>

Note that there is a space after "AWS".

The value for <Signature> is an HMAC-SHA1 signature calculated from a string containing the request headers. The headers are presented in a canonical format and the string must use the following format:

<HTTP-METHOD>\n<content-MD5>\n<ContentType>\n<date>\n<path>

For example:

PUT\n\ntext/plain\nMon, 23 Apr 2007 21:12:00 GMT\n/
[Important]Important

Notice that there is no new line at the end of the string. This is a common mistake that causes authentication failure.