How to secure an Amazon S3 URL

Question

I'm quite new to Amazon S3 and looking for a way to secure large amount of data on s3 that will be accessed by users via our website.

The issue I have is that I don't want the data on Amazon s3 to be public at all so it need sto be private but still accessible via our site.

Presigning each url request would be a pain due to the amount of new files being accessed and added all the time. I know there is option http_referer mod, should be quick and easy, and maybe in combination with very obscure URLs (long random codes in the path) that might be enough?

Is there any other way to make s3 urls secure?

Cheers

Answer 1

S3 does provide the ability to sign an image so that the URL is only valid for a limited period of time. There are more details of that here

There are a number of ways of handling access as described here