Roku Developer Program

[tmorriso]

I am working to create a side loaded channel that can access my video content on AWS S3.  I have been able to access this content if I keep my S3 bucket public using the VideoExample found here https://github.com/rokudev/samples/tree ... deoExample, but have not been able to figure out how to include security settings for the Roku channel if I would like my bucket to be private.   Can anyone help point me in the right direction on this, particularly with an IAM role to control access?  

I have already set up a user with a policy attached via a group in AWS IAM.  I have an access key and a secret key but I want avoid hardcoding it in if possible for security reasons. 

Thank you!

[cocotower]

Amazon is pestering me about how my buckets are public, but they really aren't published anywhere so the bucket names and files should still be "private" until they are published somewhere, which they aren't.

I don't understand why this topic is never answered by anyone, not even Amazon.  They over-explain it but never really outright say that you can pass the keys in the URL, or if the keys have to be embedded in the HTTP Request, etc.  Then, getting BrightScript to do basic things is like an act of congress.