Using s3 storage, I can load google maps v3 (not from s3 but from my
website), i cannot download kml directly from s3 (which i want to
protect my actual kml files from being downloaded)

BUT - google maps v3 won't load the kml file using the enclosed s3
Bucket Policy, but will load the kml using public read ACL.

HERE is a basic map im using to test bucket policy:
http://www.civitaz.com/maps/s3maps.htm

HERE is a basic map with the same kml file served from a bucket wtih
ACL set to public read (and it works fine?)
http://www.civitaz.com/maps/s3maps_acl.htm

using the firefox plugin Tamper tool, as well as checking the actual
v3maps javascript and kml file for relevant urls to allow i tried to
include anything that relates to MAPS being able to load the actual
kml file but:

i am really stuck - all i need is for this map to load up and display
kml files without letting users directly download kml files and i can
publish it to my website with my kml files (hoping that this also
achieves the intended purpose of not allowing hot linking to the map -
maybe i have a mistake in the bucket policy i just can't figure it
out!

when checking with Tamper tool - "pending" keeps coming up on anything
related to " http://maps.gstatic.com/*"; , everything else seems to
load so maybe this is an issue?
there are only 3 codes that show up when i run the page with the
tamper check on

everything is either
200 - OK
The request sent by the client was successful.

304 - Not Modified
The resource has not been modified since the last request.

or the one that i think is a problem
Pending
which is tied to the  " http://maps.gstatic.com/*"; everytime!


Current Bucket Policy:

{
    "Version": "2008-10-17",
    "Id": "Bucket policy for researchland",
    "Statement": [
        {
            "Sid": "1",
            "Effect": "Deny",
            "Principal": {
                "AWS": "*"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::mybucket/*",
            "Condition": {
                "StringNotLike": {
                    "aws:Referer": [
                        "*"
                    ]
                }
            }
        },
        {
            "Sid": "2",
            "Effect": "Allow",
            "Principal": {
                "AWS": "*"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::mybucket/*",
            "Condition": {
                "StringLike": {
                    "aws:Referer": [
                        " http://97.74.215.154/*";,
                        " http://www.civitaz.com/*";,
                        " http://www.w3.org/*";,
                        " http://www.google.com/*";,
                        " http://www.opengis.net/*";,
                        " http://mt0.google.com/*";,
                        " http://mt1.google.com/*";,
                        " http://khm0.google.com/*";,
                        " http://khm1.google.com/*";,
                        " http://mt0.gmaptiles.co.kr/*";,
                        " http://mt1.gmaptiles.co.kr/*";,
                        " http://cbk0.google.com/*";,
                        " http://cbk1.google.com/*";,
                        " http://khmdb0.google.com/*";,
                        " http://khmdb1.google.com/*";,
                        " http://maps.google.com";,
                        " http://gg.google.com";,
                        " https://maps.googleapis.com";,
                        " http://maps.googleapis.com";,
                        " http://maps.gstatic.com/*";
                    ]
                }
            }
        }
    ]
}

-- 
You received this message because you are subscribed to the Google Groups 
"Google Maps JavaScript API v3" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-maps-js-api-v3?hl=en.

Reply via email to