Generate (Pre)Signed S3 URL

First, Cognito Identity Pool is used to create an STS token based on an unauthenticated identity and a restricted IAM Role. An S3 object is already present. Using the STS token, a (pre)signed URL is generated that allows 'public' access for a specific period only.

Choose an existing S3 Object

S3 Bucket

Object

Expiration (seconds)

Generate URL's