0
302
VistasAWS S3 how to allow acces only from specific domain?
I would make the video available but only from my own domain. Do you think it is possible to set it up with AWS S3? Or anyway, this kind of intellectual property protection is not possible. If an asset is available on a website, people can download it anyway, right?!
If this is the case I should prevent the listing of the bucket and put salt in the name of the filename?
·
Juan Pablo Isaza
1 Respuestas
Responde la pregunta0
You'd need a custom policy for that.
{
"Version":"2021-11-13",
"Id":"White list a specific http-referrer",
"Statement":[
{
"Sid":"Allow get requests originating from www.giuseppemandato.com",
"Effect":"Allow",
"Principal":"*",
"Action":"s3:GetObject",
"Resource":"arn:aws:s3:::BUCKET_NAME/*",
"Condition":{
"StringLike":{"aws:Referer":["http://www.giuseppemandato.com/*","http://giuseppemandato.com/*"]}
}
}
]
}
You can flip it by stating Effect: Deny eventually, and ignore any req coming from the given domain.
- Also, check CORS configs here too https://www.eternalsoftsolutions.com/blog/how-to-restrict-s3-bucket-for-specific-domain-name/
·
Juan Pablo Isaza
Denunciar
Responde la pregunta