Can we generate a custom URL to access the s3 bucket object lifetime?

Question

Hello guys, can we generate a custom URL or any other way through which we can store the URL in DynamoDB so we can access that object anytime, or if I grant all the permission to specify bucket or grant access? Is there any solution for this

Answer

You can do that in several ways and choose a right option based on the consumers of the object, data sensitivity and access controls you would like to have.

Some resources that could help you - 
https://aws.amazon.com/premiumsupport/knowledge-center/cloudfront-https-requests-s3/
https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-bucket-intro.html
https://aws.amazon.com/premiumsupport/knowledge-center/read-access-objects-s3-bucket/
https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html (Short Living URL - Max. 12 hours life time at this moment)

Answer

Hi,
Yes, there is a way to do that by using the Pre-Signed URL.(https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html) you can also verify TTL (time to live) for the same URL. However, I would never suggest following this process for private AWS access. instead of that use a bucket policy for DynomoDB and S3 to access the s3 bucket (A secure way to access it). For public uses always attached TTL for security.

Can we generate a custom URL to access the s3 bucket object lifetime?

Relevant questions

Getting Amazon S3 object tags through CloudFront distribution URL

Where can we see DynamoDb version?

can we attach the custom domain to lambda function urls ?

S3 pre signed url with block public access on a bucket