Comment by rumanator | Hacker News Reader

Top New Best Ask Show Jobs

Comment by rumanator | Hacker News Reader

Parent Full thread

>Thing people never want: > >- A public upload bucket

Thus is outright wrong. Public upload s3 buckets are AWS's go-to basic technique to handle file uploads. AWS's API Gateway has a max file limit, and AWS advises developers to leverage S3 and lambda triggers to implement that usecases.

The bucket should never be publicly writable. The "go-to" techniques are signed POST requests [1] and signed URLs [2].

[1] https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-post-e...

[2] https://docs.aws.amazon.com/AmazonS3/latest/dev/PresignedUrl...

No (see sister comments) and your incorrect answer is part of why AWS needs to reform S3.

Yes, but the upload url's should be signed by the server in that case.

Reply on news.ycombinator.com