AWS S3 - Can We Presign an Entire Bucket?

0

Hi all,

Newbie just getting started with rest api and S3...

Q: Is it possible to presign an entire bucket / or folder rather than just one object?

Goal : to sign into a whole bucket for a period of time (ex: one day) and then use the same signature to access varied content inside the bucket with the same signature until it expires?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

2 Antworten
1

No, a presigned URL is only valid for a single object only. You could look into using a lambda to generate the presigned url's on-demand as part of your API.

AWS
bendutt
beantwortet vor 2 Jahren
  • OK thanks very much.

    Just checking: Inside a test bucket I have several items with type = folder and it has several images inside.

    Is the type = folder considered an object?

    • So you are saying that I am NOT able to sign for the whole single folder for one day and then access the individual images inside (one by one) with the folder signature (rather than an item signature)?

    Thanks much for your help - Dave

1

In my case, I consider using S3STS (S3 Security Token Service), the client assumes the role of accessing a specific folder, backend return access key, secrete key with expiration time.

The client will use that S3STS token to access the entire specific folder.

beantwortet vor 2 Jahren
  • Thanks very much Hoan, I will look into this possibility.

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen