CSR apps might end up exposing the s3 credentials

[r-a-o]

My concern is that the credentials for s3 being accessible in Client side rendering front-end framework like react. How do I make sure the credentials aren't public?

[madhu131313]

You can't. You need to upload it to your server and then upload it to S3.
Some might be using aws-s3 for Nodejs client where the credentials are safe.