Using presigned URL for S3 (without internet)

Question

I'd like to implement presigned URL for S3 but I understand that the communication is through internet.

Is it possible that the communication doesn't go through the internet?

I mean in my company we use direct connect to connect on premise to AWS. I’d like to send the data through the direct connect. Is it possible?

Answer

Hello!
AWS resources in a VPC could access S3 endpoints via an S3 VPC Gateway endpoint https://docs.aws.amazon.com/vpc/latest/privatelink/vpc-endpoints-s3.html. If the intent is for on-premises resources to access S3 via Direct Connect, you can do so using a Direct Connect public VIF or private VIF via an S3 VPC interface endpoint. https://repost.aws/knowledge-center/s3-bucket-access-direct-connect

Answer

In addition to the other suggestions, you might also use a Direct Connect Public VIF: https://www.youtube.com/watch?v=X_4ekgRc4C8&t=328s

Using presigned URL for S3 (without internet)

Contenus pertinents