Presigned URL
When to Use
Use it to grant temporary access to private assets.
- And these assets should remain private
It is not possible to extend the lifetime of a pre-signed URL beyond its original expiration timestamp.
Implement presigned URL by having it be generated when the page with private content is being rendered.
- This allows for smooth re-signing of URL while retaining minimal duration
This does add a layer to security because even if someone spreads the link to private asset cannot continue to abuse the link
- And the people who got the original link cannot keep abusing it without receiving another legit URL
When Not to Use
If the files are read-only
and public
, and should remain that way, then there is no need to add the complexity of using a pre-signed url