Skip to main content

AWS Signature v4

AWS Signature Version 4 signs requests for AWS services: S3, API Gateway, DynamoDB, Lambda, and all other AWS APIs.

Setup

  1. Select AWS Signature v4 from the Auth type dropdown
  2. Fill in:
FieldDescription
Access KeyYour AWS Access Key ID
Secret KeyYour AWS Secret Access Key
RegionAWS region (e.g., us-east-1, ap-south-1)
ServiceAWS service name (e.g., s3, execute-api, dynamodb)
Session TokenOptional — required when using temporary credentials (STS)

How it Works

Rostyman computes the Authorization header with the full AWS SigV4 signature in the Electron main process before the request is sent. The signature includes:

  • The HTTP method
  • URL and query parameters
  • Headers
  • Request body hash
  • Timestamp

The signed headers are added automatically — you do not need to add them manually.

Example — API Gateway

URL:     https://abc123.execute-api.us-east-1.amazonaws.com/prod/users
Region: us-east-1
Service: execute-api

Example — S3

URL:     https://my-bucket.s3.amazonaws.com/my-file.json
Region: us-east-1
Service: s3

Tip

Use {{variables}} for credentials so you can store different keys per environment without changing the auth config:

Access Key: {{awsAccessKey}}
Secret Key: {{awsSecretKey}}