

Basically the S3 API allows authenticating with a signature as a part of the URL that are scoped to a specific object and optionally expires.
I see, like that, right? But it says expiration is rather mandatory than optional, and these pre-signed links lasts no longer than 7 days! Or is it just an Amazon’s own limitation, and other S3-compatible providers might provide unlimited expiration time?




Well, while it’s probably the most sane solution, it doesn’t suit me at all, unfortunately. For me, there is a strict requirement: it must be free of charge, without any payment at all. Guess I should have mentioned it explicitly in the original post, but I did not expect such an immediate direction shift!