A developer is implementing AWS Signature Version 4 signed requests and has already built the canonical request, created the string to sign, and computed the signing key. Which approaches can the developer use to attach the signature to the HTTP request? (Choose two.)
Choose an answer
Tap an option to check your answer.
Correct answer: Include the signature in an HTTP header named Authorization., Add the signature as a query string parameter named X-Amz-Signature..
Why this is the answer
AWS Signature Version 4 allows attaching the computed signature to an HTTP request in two primary ways: as an Authorization header or as query string parameters. Including the signature in an Authorization header is the most common method, where the header contains the signing algorithm, credential scope, signed headers, and the final signature. Alternatively, for GET requests or when specific services require it, the signature can be included as query string parameters, with X-Amz-Signature being the parameter holding the final signature. Placing the signature in a session cookie is not a standard or secure method for AWS SigV4. Authentication and WWW-Authenticate are standard HTTP headers but are not used for carrying the AWS SigV4 signature itself; WWW-Authenticate is typically for server challenges.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed