Generate a pre-signed URL for an Amazon S3 object. This allows anyone who receives the pre-signed URL to retrieve the S3 object with an HTTP GET request. All presigned URL’s now use sigv4 so the region needs to be configured explicitly.
See ‘aws help’ for descriptions of global parameters.
presign
<S3Uri>
[--expires-in <value>]
path
(string)
--expires-in
(integer)
Number of seconds until the pre-signed URL expires. Default is 3600 seconds. Maximum is 604800 seconds.
See ‘aws help’ for descriptions of global parameters.
Example 1: To create a pre-signed URL with the default one hour lifetime that links to an object in an S3 bucket
The following presign
command generates a pre-signed URL for a specified bucket and key that is valid for one hour.
aws s3 presign s3://DOC-EXAMPLE-BUCKET/test2.txt
Output:
https://DOC-EXAMPLE-BUCKET.s3.us-west-2.amazonaws.com/key?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAEXAMPLE123456789%2F20210621%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20210621T041609Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=EXAMBLE1234494d5fba3fed607f98018e1dfc62e2529ae96d844123456
Example 2: To create a pre-signed URL with a custom lifetime that links to an object in an S3 bucket
The following presign
command generates a pre-signed URL for a specified bucket and key that is valid for one week.
aws s3 presign s3://DOC-EXAMPLE-BUCKET/test2.txt \
--expires-in 604800
Output:
https://DOC-EXAMPLE-BUCKET.s3.us-west-2.amazonaws.com/key?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAEXAMPLE123456789%2F20210621%2Fus-west-2%2Fs3%2Faws4_request&X-Amz-Date=20210621T041609Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=EXAMBLE1234494d5fba3fed607f98018e1dfc62e2529ae96d844123456
For more information, see Share an Object with Others in the S3 Developer Guide guide.