You could make a website where customers can sign in to download the software. When they click download, the site can create a signed S3 download link that is o

You could make a website where customers can sign in to download the software. When they click download, the site can create a signed S3 download link that is only valid for a few minutes (long enough for the download to complete). That's what I did for my online store (https://dashboard.vuplex.com https://dashboard.vuplex.com). On the backend, it uses the getSignedUrlPromise() method from the AWS S3 Node.js SDK: https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/S3.html#getSignedUrlPromise-property https://docs.aws.amazon.com/AWSJavaScriptSDK/latest/AWS/S3.h... From the user's perspective, they don't know they're downloading it from S3, because my site triggers the download automatically when they click the "download" button.