title: accessing AWS S3 from a desktop app securely
body: <p>I have data from multiple users inside a single S3 account. My desktop app has an authentication system which let the app know who the user is and which folder to access on S3. but the desktop app has the access code to the whole S3 folder. </p>
  
  <p>somebody told me this is not secure since a hacker could break the request from the app to the S3 and use the credentials to download all the data. </p>
  
  <p>Is this true? and if so how can I avoid it?    (he said I need to a client server in the AWS cloud but this isn't clear to me... )</p>
  
  <p>btw. I am using Boto python library to access S3. </p>
  
  <p>thanks</p>