By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS S3 - Can We Presign an Entire Bucket?

0

Hi all,

Newbie just getting started with rest api and S3...

Q: Is it possible to presign an entire bucket / or folder rather than just one object?

Goal : to sign into a whole bucket for a period of time (ex: one day) and then use the same signature to access varied content inside the bucket with the same signature until it expires?

https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.html

Topics
StorageSecurity, Identity, & Compliance
Tags
Amazon Simple Storage ServiceAWS Identity and Access Management
Language
English
AWS-User-5340815
asked 2 years ago1970 views
2 Answers
1

No, a presigned URL is only valid for a single object only. You could look into using a lambda to generate the presigned url's on-demand as part of your API.

AWS
bendutt
answered 2 years ago
  • AWS-User-5340815
    2 years ago

    OK thanks very much.

    Just checking: Inside a test bucket I have several items with type = folder and it has several images inside.

    Is the type = folder considered an object?

    • So you are saying that I am NOT able to sign for the whole single folder for one day and then access the individual images inside (one by one) with the folder signature (rather than an item signature)?

    Thanks much for your help - Dave

1

In my case, I consider using S3STS (S3 Security Token Service), the client assumes the role of accessing a specific folder, backend return access key, secrete key with expiration time.

The client will use that S3STS token to access the entire specific folder.

Hoan Pham
answered 2 years ago
  • AWS-User-5340815
    2 years ago

    Thanks very much Hoan, I will look into this possibility.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content