我们可以通过任何方式从私有 S3 存储桶公开共享特定项目吗？

Question

The question is pretty vague but here's the entire problem statement. I am using Django REST APIs, and I'm generating invocies for my clients. Using wkhtmltopdf, I'm able to generate a PDF file which gets automatically backed up to S3. Now, we need to retreive the said invoice once our client clicks on a link.

We're using pre-signed URLs right now, which last for 12 hours, right? Once that link expires, the entire backend fails.

I mean, even if we go for permanent pre-signed links, would there not be a security issue? I could really use some guidance on this.

Answer 1

Now, we need to retreive the said invoice once our client clicks on a link.

We're using pre-signed URLs right now [...]

Only generate the pre-signed URL for a given S3 URI when the authenticated client clicks on the link. You can then give it a very short expiry.