Sometimes a user without AWS credentials needs to download or upload one specific S3 object: a customer fetching an invoice PDF, or a mobile app uploading a profile photo. Making the bucket public would expose everything. A presigned URL solves this by granting temporary access to exactly one object operation.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 4 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.