Chapter 2 of 5 · 1 min
How long can an S3 presigned URL last?
Seven days at most, and only if it was made with permanent Amazon keys. Twelve hours from the console. Often under an hour when a server program made it.
The lesson 5 film is on chapter 1.
The three limits
- 7 daysat most
- a link signed with IAM user keys, permanent keys, the kind kept by a person or a script
- 12 hoursat most
- a link made in the AWS Console
- about 1 houroften
- a link made by a website or app on a server, because the program borrows a role session, temporary keys, and the link dies when they do
That last case is the most common surprise. A link your website generated may stop working while the customer is still reading the email.
And one thing nobody expects
Permission is checked when the link is opened, not when it was made. Take away the access of whoever made the link and every link they made stops at once. There is no way to switch off one link on its own.
If you need links that last a month, or can be revoked one at a time, that is a job for a workspace that issues its own links.
Prices are for US East, October 2026. How to create S3 presigned URLs for downloads and uploads has every rate and the steps.
NEXT · CHAPTER 3 OF 5Can another company use my bucket?Yes. Moving it is a different story.See the steps to open, share and give a colleague access in the AWS Console and in BucketDesk, side by side.