使用預先簽章的 URL 來共用物件

複製指令碼的內容，並將其儲存為 “get-only-url.py” 檔案。若要使用下列範例，請以您自己的資訊 (例如您的檔名) 取代使用者輸入預留位置。

import argparse
import boto3
from botocore.exceptions import ClientError

def generate_presigned_url(s3_client, client_method, method_parameters, expires_in):
    """
    Generate a presigned Amazon S3 URL that can be used to perform an action.
    
    :param s3_client: A Boto3 Amazon S3 client.
    :param client_method: The name of the client method that the URL performs.
    :param method_parameters: The parameters of the specified client method.
    :param expires_in: The number of seconds the presigned URL is valid for.
    :return: The presigned URL.
    """
    try:
        url = s3_client.generate_presigned_url(
            ClientMethod=client_method,
            Params=method_parameters,
            ExpiresIn=expires_in
        )
    except ClientError:
        print(f"Couldn't get a presigned URL for client method '{client_method}'.")
        raise
    return url

def main():
    parser = argparse.ArgumentParser()
    parser.add_argument("bucket", help="The name of the bucket.")
    parser.add_argument(
        "key", help="The key (path and filename) in the S3 bucket.",
    )
    args = parser.parse_args()
    
    # By default, this will use credentials from ~/.aws/credentials
    s3_client = boto3.client("s3")
    
    # The presigned URL is specified to expire in 1000 seconds
    url = generate_presigned_url(
        s3_client, 
        "get_object", 
        {"Bucket": args.bucket, "Key": args.key}, 
        1000
    )
    print(f"Generated GET presigned URL: {url}")

if __name__ == "__main__":
    main()

若要產生用於共用檔案的 GET 預先簽章 URL，請使用您的儲存貯體名稱和所需的物件路徑執行下列指令碼。

下列命令使用範例值。以您自己的資訊取代使用者輸入預留位置。

python get-only-url.py amzn-s3-demo-bucket <object-path>

指令碼將輸出 GET 預先簽章的 URL：

Generated GET presigned URL: https://amzn-s3-demo-bucket.s3.amazonaws.com/object.txt?AWSAccessKeyId=AKIAIOSFODNN7EXAMPLE&Signature=vjbyNxybdZaMmLa%2ByT372YEAiv4%3D&Expires=1741978496

您可以搭配 curl 使用產生的預先簽章 URL 來下載檔案：

curl -X GET "generated-presigned-url" -o "path/to/save/file"