HOW TO SECURELY TRANSFER FILES WITH PRESIGNED URLS

Summary from the TLDR InfoSec newsletter

This blog post provides prescriptive guidance for generating presigned URLs that involves using tightly scoped IAM roles, unique minces, and VPC endpoints. It details a solution overview for deploying a presigned URL generation API and an access object API. The post concludes with best practices for sharing and monitoring presigned URLs such as using HTTPS for transit, tightly scoping CORS permissions, monitoring CloudWatch logs, and utilizing AWS WAF.