How to Copy an Object with Presigned Url

How do I copy an object with presigned URL?

You can't do this with a signed url, but as has been mentioned, if you fetch and upload within EC2 in an appropriate region for the buckets in question, there's essentially no additional cost.

Also worth noting, both buckets do not have to be in the same account, but the aws key that you use to make the request have to have permission to put the target object and get the source object. Permissions can be granted across accounts... though in many cases, that's unlikely to be granted.

http://docs.aws.amazon.com/AmazonS3/latest/API/RESTObjectCOPY.html

Can I pass a presigned URL to another s3 bucket to use to download content to it?

You can use the CopyObject API call to copy an object between buckets if you have sufficient access permissions.

However, if you can only read permissions via a pre-signed URL, this will not work. You will need to download the object and then upload it to the destination bucket.

How to copy object in aws s3 from private bucket to public bucket without downloading?

The s3:CopyObject command cannot use pre-signed URLs.

In order to use the s3:CopyObject command, the AWS credentials being used simply requires read access to the source bucket, and write access to the target bucket.

If the two buckets are in the same AWS account, then this should be straight forward.

However, if the buckets are in different accounts, then you'll need to apply a bucket policy on the source bucket that grants read access to the target-bucket-owning AWS account, and use the target-bucket-owning AWS account to perform the copy.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "DelegateS3Access",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::123456789012:root"
            },
            "Action": "s3:*",
            "Resource": [
                "arn:aws:s3:::BUCKET_NAME",
                "arn:aws:s3:::BUCKET_NAME/*"
            ]
        }
    ]
}

Replace BUCKET_NAME with the name of your source S3 bucket, and 123456789012 with the AWS account ID of the target AWS account. After editing, apply this policy on your source S3 bucket.

angular2 download object using pre-signed url from s3

Here is an example to download a CSV file change the mime type for your own file.

public downloadFile(downloadLink: string) {
          return this.http.get(downloadLink)
            .map((response) => {
               const blob = new Blob([response], { type: 'text/csv'})
               window.open(window.URL.createObjectURL(blob))
          });
       }

s3 presigned url for access to entire folder

No, S3 doesn't really have a true concept of a folder. The folders are "created" using segments of the object paths. They do not exist independently of objects.

Pre-signed url for multiple files?

No, they would need to provide an API to allow you to upload multiple files first. This is a limitation of the API, not pre-signing.

See Is it possible to perform a batch upload to amazon s3?.

---

Related Topics