How to avoid using S3 Object keys in generated temporary URLs?

Question

Hello there.
I have private access to my S3 objects and I'm using `s3.getSignedUrl('getObject', options)` method from SDK in my Node.js app.
It's good solution for me except for the one thing: as I have multiple user roles in my application, I want to hide file names (object Key) for some of them.
For this I am considering the option with Gateways API to use it as proxy for my temporary generated URLs. Please, let me know if I'm on the right way.
It'll be good to initially generate link with another name using `getSignedUrl('getObject')`, but I'm not sure that this is possible.

Example of my current code,:
```
const fileTempUrl = s3.getSignedUrl('getObject', { Bucket: bucketName, Key: objectKey, Expires: ONE_DAY });
```

Thanks.

Answer

Hi.

The API approach could work, but I would recommend to give Cloudfront signed URLs a try: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-signed-urls.html
https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/modules/_aws_sdk_cloudfront_signer.html

How to avoid using S3 Object keys in generated temporary URLs?

Relevant content