Cloudflare Developers•2y ago

Is there any way to retrieve "Secret Access Key" via api

OOleksii Kilevoi Is there any way to retrieve "Secret Access Key" via api

Hello, I’m Allie!•3/26/24, 12:06 PM

This(https://canary.discord.com/channels/595317990191398933/940663374377783388/967111902197071952) should still work

Tangenius•3/26/24, 2:43 PM

Hey, I'm having some connectivity issues using the .r2.dev.r2.dev endpoint. I'm getting error: AlertReceived(HandshakeFailure)error: AlertReceived(HandshakeFailure). What could cause this? I didn't have any issues with the same setup with another s3 provider

Original message was deleted

Chaika•3/26/24, 3:32 PM

https://www.cloudflarestatus.com/incidents/b31dxdz60366 probably related

Cloudflare Dashboard and Cloudflare API service issues

Original message was deleted

Isaac McFadyen•3/26/24, 3:42 PM

They do.

Isaac McFadyen•3/26/24, 3:42 PM

It's usually a template though.

Isaac McFadyen•3/26/24, 3:43 PM

Helps ensure consistency across many different people writing incidents (since it's usually whoever is on-call writing them).

Original message was deleted

Chaika•3/26/24, 3:58 PM

"Someone tripped over the power cord"

Chaika•3/26/24, 3:59 PM

eh I mean the outcome is the same for now though, general api unavailability. Analytics as per their failover status post are still not ha/failoverable/more fragile then everything else

RAGman•3/26/24, 5:13 PM

why does CF use account number in presigned url? Isn't that less secure?

maco6517•3/26/24, 5:19 PM

When account r2 is due to pay the bill, but cannot pay, how long will it take for the file in r2 to be deleted?

Original message was deleted

RAGman•3/26/24, 5:39 PM

This from CF docs on presignedURLs. Doesn't this suggest it's not great to include account? None of the other major S3 providers do this: "It is useful to note that presigned URLs will expose your account ID and bucket name to whoever gets a copy of the URL. Public bucket URLs do not contain the account ID or bucket name. Typically, you will not share presigned URLs directly with end users or browsers, as presigned URLs are used more for internal applications."

Original message was deleted

RAGman•3/26/24, 5:53 PM

Thanks for your message. I appreciate it, but am confused as to why CF themselves would say presigned urls are not meant for sending to the browsers and are designed to be used internally.

Original message was deleted

RAGman•3/26/24, 5:56 PM

You are, of course, correct about their usefulness. I just don't want my accountID in there when sharing with browsers.

Original message was deleted

RAGman•3/26/24, 5:59 PM

That is absolutely my concern. What is it tied to? My R2 account?

RAGman•3/26/24, 6:01 PM

OK, thanks for that. I just thought that it was a good start to have an accountID, an email address likely used for the account, and a name for the account, for someone who wanted to do something malicious

Chaika•3/26/24, 6:02 PM

Your Account ID is attached to your CF Account, there's nothing people can do with that alone though. CF Employees even post their own, ex: https://github.com/search?q=org%3Acloudflare+account_id+language%3Atoml&type=code&p=5

maco6517•3/26/24, 6:05 PM

When account r2 is due to pay the bill, but cannot pay, how long will it take for the file in r2 to be deleted?

CChaika Your Account ID is attached to your CF Account, there's nothing people can do wi...

RAGman•3/26/24, 6:06 PM

Thanks for that info. So, it's safe to send presigned urls to other people for use in browsers? They are very useful and I want to be able to use them, but need to be able to hand them out for people to use

RRAGman Thanks for that info. So, it's safe to send presigned urls to other people for...

Chaika•3/26/24, 6:07 PM

Yes. If you want an example of that, Maxmind does it: https://dev.maxmind.com/geoip/updating-databases

Updating GeoIP and GeoLite Databases

Develop applications using industry-leading IP intelligence and risk scoring.

CChaika Yes. If you want an example of that, Maxmind does it: https://dev.maxmind.com/ge...

RAGman•3/26/24, 6:11 PM

Great! I feel better about it. Thanks for your help and for @Space - Ping in replies help as well.

Alex•3/26/24, 6:13 PM

Hi there. Is there a rate limit to cloudflare r2? we're doing a migration of a website and trying to transfer millions of files, but it seems that we get rate liimited

Alex•3/26/24, 6:19 PM

350-400 requests per second ?

Alex•3/26/24, 6:21 PM

Okay. We will adapt our migration app.

Alex•3/26/24, 6:24 PM

Are there any plans to make r2 faster?

Alex•3/26/24, 6:24 PM

https://community.cloudflare.com/t/cloudflare-r2-is-slow/628994

Alex•3/26/24, 6:25 PM

not related with rate limiting, just noticed that r2 is significantly slower than other s3 compatible

Alex•3/26/24, 6:27 PM

does not matter. we always expect good quality from cloudflare.

Alex•3/26/24, 6:27 PM

its more than 3 times slower than amazon s3, at some occasions even slower

AAlex does not matter. we always expect good quality from cloudflare.

RAGman•3/26/24, 6:31 PM

Do you find this only when you are migrating a lot of files at once? I am working with presigned urls and they don't seem to be any slower than the other S3 services I am testing (AWS, DigitalOcean). But that could be because it is only 1 file at a time.

Alex•3/26/24, 6:35 PM

fair enough

Original message was deleted

RAGman•3/26/24, 6:36 PM

gce = google cloud _?

Original message was deleted

RAGman•3/26/24, 6:37 PM

any experience with DigitalOcean?

Alex•3/26/24, 6:37 PM

I personally will never use google for anything other than search.

Alex•3/26/24, 6:37 PM

they dont respect privacy, period.

Unsmart•3/26/24, 6:38 PM

as if amazon respects your privacy any more :KEKW:

AAlex they dont respect privacy, period.

RAGman•3/26/24, 6:38 PM

Agreed. You'd have more privacy putting a webcam in your shower.

Alex•3/26/24, 6:39 PM

Unsmart•3/26/24, 6:39 PM

also its not gce its gcp

Alex•3/26/24, 6:40 PM

The thing with R2 is, I have sees many posts on cloudflare forum with people migrated from amazon to cloudflare r2 and they regreted it. lots of issues. if cloudflare wants to have an s3 offering, it should compete with amazon

Unsmart•3/26/24, 6:40 PM

it is competing with amazon :LUL:

Unsmart•3/26/24, 6:41 PM

Maybe it is but its still competing regardless

Unsmart•3/26/24, 6:41 PM

Not unusable for me

Unsmart•3/26/24, 6:42 PM

I mean 90% of the people here dont actually need that scale

Unsmart•3/26/24, 6:43 PM

Maybe there would be more sure but regardless the people who need many thousands of rps is the minority

Unsmart•3/26/24, 6:44 PM

Actually I would argue they would not want to switch the most because the cost of people is more

Chaika•3/26/24, 6:44 PM

There's lots of big companies using R2 like Maxmind, Vercel, nexusmods, etc, depends on your usage too. Although I think most of those are people who are just doing a lot of cached downloads

Unsmart•3/26/24, 6:45 PM

Companies like money which is exactly why they wouldnt switch because it costs them way more in people than what it would save them

Unsmart•3/26/24, 6:45 PM

youre not gonna migrate something like netflix from using aws to cloudflare overnight

Alex•3/26/24, 6:46 PM

netflix WOULD use r2 if they saved them tons of money. that's the point. cloudflare should have a product to attract those kind of customers

Chaika•3/26/24, 6:47 PM

netflix wouldn't ever use r2, they have their own cache boxes at ISPs and IX's, etc, they need really really inexpensive storage

Is there any way to retrieve "Secret Access Key" via api

Similar Threads

Similar Threads

Similar Threads