带有AWS Kinesis视频流C#的InvalidSignatureException

Question

我正试图执行我自己的HTTP签名请求，因为C#中没有用于AWS Kinesis视频流的PutMedia API的SDK，但我得到以下错误消息：

            var streamName = "audio-stream-test";
            var service = "kinesisvideo";
            var endpoint = GetPutMediaEndpoint(streamName);
            var host = GetHostFromEndpoint(endpoint);
            var region = GetRegionFromEndpoint(endpoint);

            var t = DateTime.UtcNow;
            var canonical_uri = $"{endpoint}/putMedia";

            var httpRequestMessage = new HttpRequestMessage(HttpMethod.Post, new Uri(canonical_uri));
            httpRequestMessage.Headers.Add("connection", "keep-alive");
            httpRequestMessage.Headers.Add("host", host);
            httpRequestMessage.Headers.Add("Transfer-Encoding", "chunked");
            httpRequestMessage.Headers.Add("user-agent", "AWS-SDK-KVS/2.0.2");
            httpRequestMessage.Headers.Add("x-amzn-fragment-acknowledgment-required", "1");
            httpRequestMessage.Headers.Add("x-amzn-fragment-timecode-type", "ABSOLUTE");
            httpRequestMessage.Headers.Add("x-amzn-producer-start-timestamp", (t - DateTime.MinValue).TotalMilliseconds.ToString());
            httpRequestMessage.Headers.Add("x-amzn-stream-name", streamName);
            httpRequestMessage.Headers.Add("x-amz-security-token", sessionToken);

            var byteArray = File.ReadAllBytes(filePath);
            var content = new ByteArrayContent(byteArray);
            httpRequestMessage.Content = content;

            var httpClient = new HttpClient();

            var aws4RequestSigner = new AWS4RequestSigner(accessKey, secretAccessKey);
            var signedHttpRequestMessage = aws4RequestSigner.Sign(httpRequestMessage, service, region).Result;
            var httpResponseMessage = httpClient.SendAsync(signedHttpRequestMessage);

Answer 1

伪代码的两个潜在问题。

1. 如果使用会话令牌，则请求签名不仅应包括访问密钥/秘密访问密钥组合，还应包括会话令牌。
2. PutMedia的主体是“无尽的”，因为它是实时流。因此，数据不应该包括在签名计算中。