使用 AWS re:Post 即表示您同意 AWS re:Post 使用條款
AWS re:Postre:Post

AWS S3 - Can We Presign an Entire Bucket?

0

Hi all,

Newbie just getting started with rest api and S3...

Q: Is it possible to presign an entire bucket / or folder rather than just one object?

Goal : to sign into a whole bucket for a period of time (ex: one day) and then use the same signature to access varied content inside the bucket with the same signature until it expires?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

主題
儲存空間安全性、身分識別與合規
標籤
Amazon Simple Storage ServiceAWS Identity and Access Management
語言
English
AWS-User-5340815
已提問 2 年前檢視次數 2048 次
2 個答案
1

No, a presigned URL is only valid for a single object only. You could look into using a lambda to generate the presigned url's on-demand as part of your API.

AWS
bendutt
已回答 2 年前
  • AWS-User-5340815
    2 年前

    OK thanks very much.

    Just checking: Inside a test bucket I have several items with type = folder and it has several images inside.

    Is the type = folder considered an object?

    • So you are saying that I am NOT able to sign for the whole single folder for one day and then access the individual images inside (one by one) with the folder signature (rather than an item signature)?

    Thanks much for your help - Dave

1

In my case, I consider using S3STS (S3 Security Token Service), the client assumes the role of accessing a specific folder, backend return access key, secrete key with expiration time.

The client will use that S3STS token to access the entire specific folder.

Hoan Pham
已回答 2 年前
  • AWS-User-5340815
    2 年前

    Thanks very much Hoan, I will look into this possibility.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋，同時有助於提問者的專業成長。

回答問題指南

相關內容