Flash Player 10 will not work with Amazon S3
With the upcoming new Flash Player 10, stricter crossdomain rules are breaking Amazon S3 for those of us who wish to load content using the Flash Player. It seems that Amazon will need to do some work to make sure that the new Flash Player will work with Amazon S3, specifically they will need to define new meta-policy files to allow us to continue to use policy files within our buckets.
“With Phase 2 in Flash Player 10 beta, the meta-policy default will change from “all” to “master-only.” This will allow all master policy files (any policy file saved in the root of the domain with the name crossdomain.xml, such as http://example.com/crossdomain.xml) to continue to function as expected. However, all other policy files defined in alternate locations will require an explicit meta-policy for them to work.”
Currently, the Flash Player 10 interaction with S3 is broken, and they are at the Release Candidate stage.
See this information on Understanding the security changes in Flash Player 10 beta
And, this specifically with regards to Policy file changes in Flash Player 9.
We’ve been asking for a crossdomain policy file at the root of Amazon for some time now. At the very least to prevent those annoying http errors when the Flash Player tries to load it and fails. I believe this is as simple as placing a crossdomain policy file like this at:
http://s3.amazonaws.com/crossdomain.xml
<cross-domain-policy>
<site-control permitted-cross-domain-policies="all"/>
</cross>
If you clicked on that crossdomain link above and you get an error, it means that the problem still exists.
“If you depend on content from a domain outside of your control, you should contact that domain’s administrator and make sure they have a meta-policy that is up to date.”
I’ve contacted Amazon through their developer forum. Sometimes though, it takes more than one person to get the attention of the bigger guys. If you get a chance, drop them a line and tell them to get on the ball. Perhaps Adobe can help us out by doing a little outreach. This needs to be fixed soon!
Well, working with Amazon S3 you can use two methods:
1.) regular – http://s3.amazonaws.com/bucketname/crossdomain.xml
2.) sub-domain – http://bucketname.s3.amazonaws.com/crossdomain.xml
I guess second should work just fine, as “s3.amazonaws.com” and “bucketname.s3.amazonaws.com” are different domains for Flash Player.
Comment by Akira — 8/27/2008 @ 4:21 am
Akira,
That’s a great point. The bucket name I am using is in the format “www.example.com”. I tested this and http://www.example.com.s3.amazonaws.com works! My only concern is that the dots in the bucketname may some day not be supported for some reason. I still think Amazon should put up a meta-policy file to ensure everyone’s buckets continue to work without any trickery.
Comment by geoff — 8/27/2008 @ 12:01 pm
I’ve been doing this for some time now, using their virtual host thingie. Basically you add some DNS entries, and then create say a bucket named ’s3.neurofuzzy.net’, and then you can access files in it like http://s3.neurofuzzy.net/some/file/in/s3/bucket. That means you just need to put a crossdomain.xml inside your ’s3.neurofuzzy.net’ bucket. Plus, you don’t have to call it ’s3′, so you can somewhat hide the fact that you are depending on amazon
Comment by David R — 8/27/2008 @ 1:16 pm
Well, I agree AWS should change their master crossdomain.xml. Blg at least we have solution that works for now. ,)
BTW I can’t see any good reason for Amazon to remove domain-based bucket address, lotsa apps will get ruined because of this, not only flash based ones.
Besides, I think DNS workaround is great too. Just LOVE the idea of having domain name like ’storage.antistatic.net’. =)
Comment by Akira — 8/27/2008 @ 5:26 pm
Oh, and a lil bit offtopic: have you ever considered Intense Debate for comments? They have plugin for WP (and I am too lazy to enter info/captcha =) )
Comment by Akira — 8/27/2008 @ 5:29 pm
I’ll check out Intense Debate. I rolled my own CAPTCHA and ever since then I’ve not gotten any spam, so it’ll have to be good to sell me on it!
Comment by geoff — 8/27/2008 @ 6:28 pm
I am running into the same problem. Additionaly it is https. In this case, mydomain.com doesn't work b/c the SSL certificate is only valid for s3.amazonaws.com. Any workarounds for the secure connections?
Comment by Barish — 6/5/2009 @ 10:19 pm
In these days, these problems are no much found in most of hosting site. Thing are coming improved.
Comment by sulumits retsambew — 6/8/2009 @ 9:53 am
try the affiliate marketing of amazon it is nice and sure you can earn money as you can.
Comment by sulumits retsambew — 7/15/2009 @ 9:31 am
Thank you for the opportunity to view and comment on your blog. Your site is full of good information I can use to make my online business a success. Thanks again and keep up the good work!
Francisco
Comment by Francisco — 7/30/2009 @ 8:10 pm
hi everybody. I was working with flex, trying to make an upload/download aplication, and i found an IOError (ID=2038) when a file is being upload to a S3 bucket. Does anybody have a solution??.
Comment by mati — 9/16/2009 @ 11:52 am
I am still a bit new to all this. I am learning fast thanks for the Flash Player 10 interaction with S3 Info. It is good info for people like me. Thanks
Comment by Serenity — 10/14/2009 @ 5:18 am
I agree with you. I don't have that problem until now.
Comment by heri flood — 11/20/2009 @ 8:54 am
Thank you for the opportunity to view and comment on your blog. Your site is full of good information I can use to make my online business a success.keep working!
Comment by regtweaker — 1/20/2010 @ 9:05 am
Well, I agree AWS should change their master crossdomain.xml. Blg at least we have solution that works for now.
Comment by registry cleaner — 1/24/2010 @ 5:17 pm
I had at that time the same problem!But nowadays these problems are minor!
Comment by andrew — 1/30/2010 @ 7:00 pm
Hi, there is a powerful data recovery software, you can use it to get your deleted files
http://www.sondle.com
Comment by david — 1/31/2010 @ 5:12 am
Thank you for the opportunity to view and comment on your blog.
Comment by freeregistrycleaner — 2/1/2010 @ 4:34 pm
Well, I agree AWS should change their master crossdomain.xml. Blg at least we have solution that works for now. This is good information! Tkanks again!
Comment by david — 2/2/2010 @ 5:35 pm