Pre-signed URLs

• All objects by default are private.

• Only the object owner has permission to access these objects.

  • However, the object owner can optionally share objects with others by creating a presigned URL, using their own security credentials, to grant time-limited permission to download the objects.

• When you create a presigned URL for your object, you must provide your security credentials, specify a bucket name, an object key, specify the HTTP method and expiration date and time.

• The presigned URLs are valid only for the specified duration.

• Anyone who receives the presigned URL can then access the object.