仅限 Cognito 身份验证用户的 S3 访问

Question

For a small project i am developing using angular framework, i have autenticated users with access, id and refresh tokens from cognito which is used to log into the site. Now is there any way to use these tokes to grant access to uploading and downloading files from and to my s3 bucket?

Answer 1

Create a pre-signed URL for the get or put operation, and pass that back to the frontend which will do the actual upload or download using that url.

Here's an example from the golang docs:

https://docs.aws.amazon.com/sdk-for-go/v1/developer-guide/s3-example-presigned-urls.html