s3 presigned url for access to entire folder

Question

I have an s3 bucket that has individual folders that contain different websites. I would like to generate a presigned url for access to a specific folder, however I would like to have the url allow access to all objects in that folder. Is this possible?

I'm using the ruby aws-sdk gem v2.

My existing code looks like this

  def get_object_url(bucket_name, object_name)
    res = Aws::S3::Resource::new
    obj = res.bucket(bucket_name).object(object_name)
    exp = 1.day
    url = obj.presigned_url(:get, {
                           expires_in: exp,
                           virtual_host: true
                       })
    url
  end

passing the folder name as object_name doesn't work.

Answer 1

No, S3 doesn't really have a true concept of a folder. The folders are "created" using segments of the object paths. They do not exist independently of objects.

Answer 2

I recently had this problem and i could find a solution with custom policies for signed URL using cloudfront.

Has some pros and cons, the main one is that u dont need to sign for each object so is much more faster if you need to share many objects. But it goes like outside of aws traffic.

http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-creating-signed-url-custom-policy.html

Answer 3

My workaround will be to compress files and folder structure into an archive (like zip) and just upload that single object (file) to the presigned URL.