Note that there are some explanatory texts on larger screens.

plurals
  1. POHow to make images hosted on Amazon S3 less public but not completely private?
    primarykey
    data
    text
    <p>I fired up a sample application that uses Amazon S3 for image hosting. I managed to coax it into working. The application is hosted at <a href="http://github.com/pedro/paperclip-on-heroku" rel="noreferrer">github.com</a>. The application lets you create users with a profile photo. When you upload the photo, the web application stores it on Amazon S3 instead of your local file system. (Very important if you host at <a href="http://heroku.com" rel="noreferrer">heroku.com</a>)</p> <p>However, when I did a "view source" in the browser of the page I noticed that the URL of the picture was an Amazon S3 URL in the S3 bucket that I assigned to the app. I cut &amp; pasted the URL and was able to view the picture in the same browser, and in in another browser in which I had no open sessions to my web app or to Amazon S3. </p> <p>Is there any way that I could restrict access to that URL (and image) so that it is accessible only to browsers that are logged into my applications? </p> <p>Most of the information I found about Amazon ACLs only talk about access for only the owner or to groups of users authenticated with Amazon or AmazonS3, or to everybody anonymously. </p> <p>EDIT----UPDATE July 7, 2010</p> <p>Amazon has <a href="http://aws.typepad.com/aws/2010/07/amazon-s3-bucket-policies-another-way-to-protect-your-content.html" rel="noreferrer">just announced</a> more ways to restrict access to S3 objects and buckets. Among other ways, you can now restrict access to an S3 object by qualifying the HTTP referrer. This looks interesting...I can't wait until they update their developer documents. </p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload