AWS S3 存储桶预签名 url 问题

Question

I have written an API to read user posts after the token is passed in the header. API returns many posts at a time with the nested attachment name for images or videos etc. Currently, all attachments are stored in a server folder directory. Attachments is displayed by another API which accept attachment name as a parameter and return attachment url.

Now I want to move on AWS S3 bucket with the same concept with presigned URL.

API is being used on the flutter app.

I created a API which accept user auth token and return upload presigned URL for s3 bucket.

For displaying attachments i am thinking two option.

1. Create a another API which accept attachment name(object key name) and will return presigned URL of that attachment.

2. Post API return json data after replacing all attachment name with presigned URL. But this will take too long for nested json data by looping.

I am new in AWS s3 bucket. Please guide what will be the best way to handle this.

How facebook, twitter, instagram handle private files.

Answer 1

The best option I see is returning the post data with already generated pre-signed url.

Having a separate api for generating the presigned url would mean

• the system will need to authorize the input anyway (if the user is authorized to access the particular object)
• the user has to wait anyway until the signed links are generared, just with additional call

this will take too long for nested json data by looping

Not really, generating the presigned url makes no backend / S3 calls, it's just a bunch of HMAC computations. But, as already mentioned, these need to be done regardless which option is chosen