The Authorization header in REST requests contains the authentication information. The header must contain a string of the following format:
AWS <AWSAccessKeyId>:<Signature>
Note that there is a space after "AWS".
The value for <Signature> is an HMAC-SHA1 signature calculated from a string containing the request headers. The headers are presented in a canonical format and the string must use the following format:
<HTTP-METHOD>\n<content-MD5>\n<ContentType>\n<date>\n<path>
For example:
PUT\n\ntext/plain\nMon, 23 Apr 2007 21:12:00 GMT\n/
![]() | Important |
|---|---|
Notice that there is no new line at the end of the string. This is a common mistake that causes authentication failure. |