AWS签名生成

Question

如何生成用于从AWS url获取数据的AWS签名？

我有以下凭据。

$AWS_ACCESS_KEY_ID = 'XXXXXXXXXXXX';
$AWS_SECRET_ACCESS_KEY = 'XXXXXXXXXXXXXXXXXX';

和下面的url

url="https://ow9hw5rtpk.execute-api.us-west-2.amazonaws.com/dev/getOrderStatus?order_id=XXXXX&zip=XXXX";

我必须从上面的url中获取数据。我尝试了几篇用cUrl编写的php代码，但是没有得到预期的json格式的输出。

当我运行从postman测试接口获得的以下代码时，我会得到输出，但签名是静态的。请添加或编辑以下代码以生成动态aws签名。

<?php
$curl = curl_init();
$datestamp = time();
$date = gmdate('D, d M Y H:i:s e',$datestamp);
curl_setopt_array($curl, array(
  CURLOPT_URL => "https://ow9hw5rtpk.execute-api.us-west-2.amazonaws.com  /dev/getOrderStatus?email=XXX@XXXX.NET&zip=XXXX",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_SSL_VERIFYHOST=>0,
  CURLOPT_SSL_VERIFYPEER=>0,
  CURLOPT_HTTPHEADER => array(
    "Authorization: AWS4-HMAC-SHA256 Credential=AKIAIV4KH3BTCPT3E6FA/20180112/us-west-2/execute-api/aws4_request, SignedHeaders=content-type;host;x-amz-date, Signature=cf871e46b14f48ef7e08e003250f6fcf7d0a90c5ca29b51ff9f6eae0eb104cdb",
    "Cache-Control: no-cache",
    "Content-Type: application/x-www-form-urlencoded",
    "Postman-Token: 3bea6936-0a81-e723-ee36-9e08a219a975",
    "X-Amz-Date: 20180112T110821Z"
  ),
));

$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
?>

Answer 1

看起来Authorization中缺少x-amz-content-sha256，所以在添加之后，下面的内容也会改变( sha256的值将通过functions-SDK生成)

SignedHeaders=content-type;host;x-amz-date

至

SignedHeaders=content-type;host;x-amz-content-sha256;x-amz-date

通常，我鼓励使用SDKs provided by AWS准备Auth标头