AWS S3 - Can We Presign an Entire Bucket?

Hi all,

Newbie just getting started with rest api and S3...

Q: Is it possible to presign an entire bucket / or folder rather than just one object?

Goal : to sign into a whole bucket for a period of time (ex: one day) and then use the same signature to access varied content inside the bucket with the same signature until it expires?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

主题

存储安全、身份和合规性

标签

亚马逊简单存储服务 (S3)AWS 身份和访问权限管理

语言

English

AWS-User-5340815

已提问 2 年前2054 查看次数

2 回答

最新
投票最多
评论最多

No, a presigned URL is only valid for a single object only. You could look into using a lambda to generate the presigned url's on-demand as part of your API.

bendutt

已回答 2 年前

AWS-User-5340815
2 年前
OK thanks very much.

Just checking: Inside a test bucket I have several items with type = folder and it has several images inside.

Is the type = folder considered an object?

So you are saying that I am NOT able to sign for the whole single folder for one day and then access the individual images inside (one by one) with the folder signature (rather than an item signature)?

Thanks much for your help - Dave

In my case, I consider using S3STS (S3 Security Token Service), the client assumes the role of accessing a specific folder, backend return access key, secrete key with expiration time.

The client will use that S3STS token to access the entire specific folder.

Hoan Pham

已回答 2 年前

AWS-User-5340815
2 年前
Thanks very much Hoan, I will look into this possibility.

AWS S3 - Can We Presign an Entire Bucket?

相关内容