3 ms·
>Thing people never want: > >- A public upload bucket Thus is outright wrong. Public upload s3 buckets are AWS's go-to basic technique to handle file uploads.
by rumanator 6y ago
>Thing people never want:
>
>- A public upload bucket
Thus is outright wrong. Public upload s3 buckets are AWS's go-to basic technique to handle file uploads. AWS's API Gateway has a max file limit, and AWS advises developers to leverage S3 and lambda triggers to implement that usecases.
- bostonvaulter2 6y agoYes, but the upload url's should be signed by the server in that case.
- john-shaffer 6y agoThe bucket should never be publicly writable. The "go-to" techniques are signed POST requests [1] and signed URLs [2]. [1] https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-post-example.html https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-post-e... [2] https://docs.aws.amazon.com/AmazonS3/latest/dev/PresignedUrlUploadObject.html https://docs.aws.amazon.com/AmazonS3/latest/dev/PresignedUrl...
- earthboundkid 6y agoNo (see sister comments) and your incorrect answer is part of why AWS needs to reform S3.