Only the object owner has permission to access these objects.
However, the object owner can optionally share objects with others by creating a presigned URL, using their own security credentials, to grant time-limited permission to download the objects.
When you create a presigned URL for your object, you must provide your security credentials, specify a bucket name, an object key, specify the HTTP method and expiration date and time.
The presigned URLs are valid only for the specified duration.
Anyone who receives the presigned URL can then access the object.