Do pre-signed s3 urls using transfer accelerating always go over the public internet?

0

So our current infrastructure always generates pre-signed transfer accelerating links on an API (links like https://<bucked>.s3-accelerate.amazonaws.com/<file>?...). These are generated by an API hosted on AWS. These links are used to download files by different services:

  • services hosted on our AWS infrastructure
  • services hosted on 3th party clients AWS infrastructure
  • services outside of AWS

It is however not clear to us when these files would be downloaded through the public internet or stay within the AWS infrastructure. The files are quite large so we thus would like to only go through the public internet if needed. I was thus wondering in which cases we can stay within AWS and if we can always use transfer accelerating links or should use normal presigned URLs when we are downloading from within AWS.

asked 4 months ago336 views
1 Answer
0

According to https://docs.aws.amazon.com/AmazonS3/latest/userguide/transfer-acceleration.html:

Transfer Acceleration is designed to optimize transfer speeds from across the world into S3 buckets. Transfer Acceleration takes advantage of the globally distributed edge locations in Amazon CloudFront. As the data arrives at an edge location, the data is routed to Amazon S3 over an optimized network path.

So transfer does go through the internet.

If you can/want to compromise with latency/speed, you can still use CloudFront pre-signed URLs: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-signed-urls.html

profile picture
EXPERT
answered 4 months ago
  • Thank you for your answer. I however did find this on the pricing page (https://aws.amazon.com/s3/pricing/):

    Each time you use S3 Transfer Acceleration to upload an object, we will check whether the service is likely to be faster than a regular Amazon S3 transfer. If we determine that it is not likely to be faster than a regular Amazon S3 transfer of the same object to the same destination AWS Region, we will not charge for that use of S3 Transfer Acceleration for that transfer, and may bypass the S3 Transfer Acceleration system for that upload.

    So I was wondering if it would still applies to pre-singed URLs.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions