java - Secure way to store and use Amazon Access key for Android -
I'm trying to create an application for Android that uses Amazon Simplified. I have seen the source code of the example code given by Amazon. Although in the demo, credentials are stored in just one constants.java and I believe that this method is not absolutely safe because potential people are people who are unable to expose credentials to the APK with Progord.
So I went to Amazon article on this and I could not understand enough because I am not very familiar with cryptography in Android / Java.
How do I get access to Amazon SARDBI from my application while keeping the access key safe from external parties?
Edit 1: I want to use the application to recover data from SDDB, showing in the list view. For example food and other users will be able to get similar reviews posted by other users just like a simple review. If the user wants to review, they have to sign up for an account and log in.
The AWS provides some solutions for delivering credentials to the device outside of hard work, one or both You can meet your specific needs:
- The AWS provides examples for both TVM and can be adapted to meet your needs.
- Uses identities from Facebook, Google, and Amazon.
Our samples are also included to integrate with these techniques, although not specifically in the Simplified example.
Comments
Post a Comment