AWS re:Postを使用することにより、以下に同意したことになります AWS re:Post 利用規約
AWS re:Postre:Post

AWS S3 - Can We Presign an Entire Bucket?

0

Hi all,

Newbie just getting started with rest api and S3...

Q: Is it possible to presign an entire bucket / or folder rather than just one object?

Goal : to sign into a whole bucket for a period of time (ex: one day) and then use the same signature to access varied content inside the bucket with the same signature until it expires?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

トピック
ストレージセキュリティ、アイデンティティ、コンプライアンス
タグ
Amazon Simple Storage Service (S3)AWS Identity and Access Management
言語
English
AWS-User-5340815
質問済み 2年前2049ビュー
2回答
1

No, a presigned URL is only valid for a single object only. You could look into using a lambda to generate the presigned url's on-demand as part of your API.

AWS
bendutt
回答済み 2年前
  • AWS-User-5340815
    2年前

    OK thanks very much.

    Just checking: Inside a test bucket I have several items with type = folder and it has several images inside.

    Is the type = folder considered an object?

    • So you are saying that I am NOT able to sign for the whole single folder for one day and then access the individual images inside (one by one) with the folder signature (rather than an item signature)?

    Thanks much for your help - Dave

1

In my case, I consider using S3STS (S3 Security Token Service), the client assumes the role of accessing a specific folder, backend return access key, secrete key with expiration time.

The client will use that S3STS token to access the entire specific folder.

Hoan Pham
回答済み 2年前
  • AWS-User-5340815
    2年前

    Thanks very much Hoan, I will look into this possibility.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ