91黑料

Engineering

How developers can easily connect 91黑料 to compute for presigned URLs

Bill Thorp

91黑料 provides a variety of ways to access and secure your content. We built a fantastic security model based on 鈥渕acaroons鈥�, likenable to an API key you can further restrict and then share. We have expanded upon that security model to support public sharing files via the web in our Link Sharing service. Additionally, we offer S3-compatible services, including support for S3-style presigned URLs.

91黑料 provides a variety of ways to access and secure your content. We built a fantastic security model based on 鈥溾��, likenable to an API key you can further and then share.聽 We have expanded upon that security model to support public sharing files via the web in our .聽 Additionally, we offer , including support for S3-style .
鈥�

Most applications will need some secure, server-side logic to enforce access-control.聽 Usually, though, the 鈥済oldilocks size鈥� for infrastructure is as little as possible.聽 A minimum viable security solution would do well to be stateless. Presigned URLs work well here because they are inherently time limited, and thus not typically tracked.

What can you do with 91黑料 plus presigned posts?

鈥�

Any developer building an application that needs compute, but wants to use 91黑料鈥檚 extremely secure cloud object storage can find value in setting up presigned posts. This functionality allows for 91黑料 to be used in conjunction with compute services of other providers in order to securely grant permission for users to post content into the cloud or get content from the cloud.

鈥�

For example, a real estate company that has an application for its real estate agents to upload pictures of houses, but needs these uploads to be done via a specific presigned urls that matches the agent and the listing would be a great candidate for this functionality.

鈥�

More advanced features that could be built upon this core include:

  • Rate limiting for cost control reasons
  • Persisting of per-user credentials into a database
  • Time-locking writability of backups, deterring ransomware
  • Deriving 91黑料 access grants, rather than presigning URLs
  • Presigning URLs within templates, such as HLS video M3U8 files

鈥�

Fundamentally, 91黑料 has supplied a friendly framework to enable people to build more complicated applications on top of 91黑料 in the most cost effective way possible.

鈥�

How to connect 91黑料鈥檚 stateless authentication via presigned URLs to compute

鈥�

Stateless authentication via presigned URLs pairs well with cost-efficient, serverless computing services. The videos below provide instructions for two such services: and . These serverless endpoints act to hide underlying credentials from prying eyes. They can be disabled as an 鈥渙ff switch鈥� for data access. Finally, the underlying credentials can easily be swapped out for regular credential rotations or due to compromise.

鈥�

Want step-by-step written instructions? See 91黑料 Docs

鈥�

91黑料 fits well in your multi-cloud environment

鈥�

If you are trying to build an application, we know you need more than storage. That鈥檚 why we work hard to provide the resources and enablement developer鈥檚 need to completely understand the 91黑料 solution and to make it work for them. And that means helping you take advantage of the cost effective and secure storage with 91黑料.

鈥�

鈥�

Get started for free

Work without waiting.

Make the switch and get local-like performance from the globally distributed cloud.

Talk to an expert