I am currently investigating the validity of the following statement:
Based on my research, it seems unlikely to create a web application using only JavaScript - without any server-side logic - hosted on Amazon S3 that can also store data solely on S3 while accommodating multiple clients with individual private data.
The main concern I have is the Authorization header required for each Ajax call, which may necessitate me including the signature (along with my AWS id) directly in the page source, exposing it to all users.
Is my understanding correct or did I misinterpret the documentation?
Are there any potential solutions or workarounds available?