Skip to content

S3 Pre-signed URLsΒΆ

  • Can generate pre-signed [[URL]]s using AWS SDK or [[AWS CLI]]
    • For downloads (easy, can use the [[AWS CLI]])
    • For uploads (harder, must use the AWS SDK)
  • Valid for a default of 3600 seconds, can change timeout with --expires-in argument

  • Users given a pre-signed URL inherit the permissions of the person who generated the [[URL]] for [[HTTP GET]]/[[HTTP PUT]]

  • Examples

    • Allow only logged-in users to download a premium video on your AWS S3 Bucket
    • Allow an ever changing list of users to download files by generating [[URL]]s dynamically
    • Allow temporarily a user to upload file to a precise location in your bucket
aws s3 presign s3://my-sample-bucket-monitored/file.txt --expires-in 300 --region eu-west-1