Get a link to an object

You can:

• get a link to an object in a public bucket — all objects are accessible via public domains of the storage;
• get a link to an object in a private bucket — the link can be made permanent or temporary.

We do not recommend using Cyrillic in object names. If you do use Cyrillic, encode the Cyrillic part of the link when working with links to such objects.

Get a link to an object in a public bucket

1. In the Control panel, in the top menu, click Products and select S3.
2. Go to the Buckets section.
3. Open the bucket page → Objects tab.
4. In the object row, click .
5. In the link row, click .

Get a link to an object in a private bucket

You can:

• create a permanent or temporary link in the Control Panel. The link will be saved in a special bucket links as an object with the same name as the object pointed to by the link. Access to the object will be via the public domain of the bucket links;
• get a temporary link via a presigned URL;
• get a permanent link via a script;
• get a permanent or temporary link using tools, for example, Rclone, AWS CLI, Cyberduck, and S3 Browser.

Create a link in the control panel

You can get a temporary or permanent link to an object in a private bucket.

An object in a private bucket will be accessible at a link like https://<bucket_public_domain>/<object_name>, where:

• <bucket_public_domain> — public domain of the bucket;
• <object_name> — object name.

When you create a link to an object in a private bucket for the first time, a public bucket links is automatically created in the project. The created link is added to it as an object with the same name as the main object. Objects in the bucket links have zero size and do not consume storage volume. If you configure the link as temporary, the object with the link will be automatically deleted from the bucket links when the link expires.

To create a link:

1. In the Control panel, in the top menu, click Products and select S3.

2. Go to the Buckets section.

3. Open the bucket page → Objects tab.

4. In the object's menu, select Open access.

5. Optional: in the Link URL field, change the object name that will be displayed in the link or keep the current one.

6. Optional: to allow following the link only once, select the One-time link checkbox.

7. Optional: to limit the link lifetime, select the Time limits checkbox and select one of the options:

   • Delete after — the link will stop working after the selected period of time after creation;
   • Delete at specified time — the link will stop working at the selected date and time.

8. Click Create link.

9. To copy the link, click . You can copy it later in the links bucket.

Get a temporary link via a signed URL

Using AWS SDK presigned URLs, you can get a temporary link to an object. For more information, see the Sharing objects with presigned URLs guide in the AWS documentation.

Python

Script example:

import boto3

ACCESS_KEY = "<access_key>"      
SECRET_KEY = "<secret_key>"      
ENDPOINT_URL = "<s3_domain>" 
BUCKET_NAME = "<bucket_name>"       
OBJECT_KEY = "<path_to_object>"      
EXPIRES_IN = "<time>"

s3 = boto3.client(
    "s3",
    aws_access_key_id=ACCESS_KEY,
    aws_secret_access_key=SECRET_KEY,
    endpoint_url=ENDPOINT_URL,
)

url = s3.generate_presigned_url(
    ClientMethod="get_object",
    Params={"Bucket": BUCKET_NAME, "Key": OBJECT_KEY},
    ExpiresIn=EXPIRES_IN
)

print("\PresignedUrl
:")
print(url)

Specify:

• <access_key> — value of the Access key field from the S3 key;
• <secret_key> — value of the Secret key field from the S3 key;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link validity period in seconds.

PHP

Script example:

<?php
require 'vendor/autoload.php';

use Aws\S3\S3Client;
use Aws\Exception\AwsException;

$servercoreS3 = new S3Client([
    'version' => 'latest',
    'region'  => '<pool>',
    'endpoint' => '<s3_domain>':,
    'use_path_style_endpoint' => true,
    'credentials' => [
        'key'    => '<access_key>',
        'secret' => '<secret_key>',
    ],
]);

$bucket = '<bucket_name>';
$key = '<path_to_object>';

try {
    $cmd = $servercoreS3->getCommand('GetObject', [
        'Bucket' => $bucket,
        'Key'    => $key
    ]);

    $request = $servercoreS3->createPresignedRequest($cmd, '<time>');
    $presignedUrl = (string)$request->getUri();

    echo "Public link: $presignedUrl\n";
} catch (AwsException $e) {
    echo "Error generating link: " . $e->getMessage() . "\n";
}

Specify:

• <pool> — pool where the bucket is located;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <access_key> — value of the Access key field from the S3 key;
• <secret_key> — value of the Secret key field from the S3 key;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link validity period, for example, +1 hour.

JavaScript

Script example:

import { S3Client, GetObjectCommand } from "@aws-sdk/client-s3";
import { getSignedUrl } from "@aws-sdk/s3-request-presigner";

const client = new S3Client({
region: "<pool>",
endpoint: "<s3_domain>",
forcePathStyle: true,
credentials: {
    accessKeyId: "<access_key>",
    secretAccessKey: "<secret_key>",
},
});

async function generatePresignedUrl() {
const bucket = "<bucket_name>";   
const key = "<path_to_object>";          

const command = new GetObjectCommand({ Bucket: bucket, Key: key });

const url = await getSignedUrl(client, command, { expiresIn: <time> });
console.log("Presigned URL:", url);
}

generatePresignedUrl().catch(console.error);

Specify:

• <pool> — pool where the bucket is located;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <access_key> — value of the Access key field from the S3 key;
• <secret_key> — value of the Secret key field from the S3 key;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link validity period in seconds.

Java

Script example:

package com.example;

import software.amazon.awssdk.auth.credentials.AwsBasicCredentials;
import software.amazon.awssdk.auth.credentials.StaticCredentialsProvider;
import software.amazon.awssdk.regions.Region;
import software.amazon.awssdk.services.s3.S3Client;
import software.amazon.awssdk.services.s3.model.GetObjectRequest;
import software.amazon.awssdk.services.s3.model.S3Exception;
import software.amazon.awssdk.services.s3.presigner.S3Presigner;
import software.amazon.awssdk.services.s3.presigner.model.GetObjectPresignRequest;
import software.amazon.awssdk.services.s3.presigner.model.PresignedGetObjectRequest;

import java.net.URI;
import java.time.Duration;

public class ServercoreS3PresignedUrlGenerator {
    public static void main(String[] args) {

        String endpoint = "<s3_domain>"; 
        String region = "<pool>";
        String accessKey = "<access_key>";
        String secretKey = "<secret_key>";
        String bucketName = "<bucket_name>";
        String objectKey = "<path_to_object>";

        StaticCredentialsProvider credentials = StaticCredentialsProvider.create(
                AwsBasicCredentials.create(accessKey, secretKey)
        );

        S3Client s3Client = S3Client.builder()
                .endpointOverride(URI.create(endpoint))
                .region(Region.of(region))
                .credentialsProvider(credentials)
                .build();

        S3Presigner presigner = S3Presigner.builder()
                .endpointOverride(URI.create(endpoint))
                .region(Region.of(region))
                .credentialsProvider(credentials)
                .build();

        try {
            GetObjectRequest getObjectRequest = GetObjectRequest.builder()
                    .bucket(bucketName)
                    .key(objectKey)
                    .build();

            GetObjectPresignRequest presignRequest = GetObjectPresignRequest.builder()
                    .signatureDuration(Duration.ofMinutes(<time>))
                    .getObjectRequest(getObjectRequest)
                    .build();

            PresignedGetObjectRequest presignedRequest = presigner.presignGetObject(presignRequest);

            System.out.println("Presigned URL: " + presignedRequest.url());
            System.out.println("Expires at: " + presignedRequest.expiration());

        } catch (S3Exception e) {
            System.err.println("Error generating presigned URL: " + e.awsErrorDetails().errorMessage());
        } finally {
            s3Client.close();
            presigner.close();
        }
    }
}

Specify:

• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <pool> — pool where the bucket is located;
• <access_key> — value of the Access key field from the S3 key;
• <secret_key> — value of the Secret key field from the S3 key;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link validity period in minutes.

Go

Script example:

package main 
import (
    "context"
    "fmt"
    "log"
    "time"
    "github.com/aws/aws-sdk-go-v2/aws"
    "github.com/aws/aws-sdk-go-v2/config"
    "github.com/aws/aws-sdk-go-v2/credentials"
    "github.com/aws/aws-sdk-go-v2/service/s3"
)
func main() {
    cfg, err := config.LoadDefaultConfig(context.TODO(),
        config.WithCredentialsProvider(
            credentials.NewStaticCredentialsProvider("<access_key>", "<secret_key>", ""),
        ),
    )
    if err != nil {
        log.Fatal(err.Error())
    }
    client := s3.NewFromConfig(cfg, func(o *s3.Options) {
        o.BaseEndpoint = aws.String("<s3_domain>")
        o.Region = "<pool>"
    })
    presignClient := s3.NewPresignClient(client)
    req, err := presignClient.PresignGetObject(context.TODO(), &s3.GetObjectInput{
        Bucket: aws.String("<bucket_name>"),
        Key:    aws.String("<path_to_object>"),
    }, s3.WithPresignExpires(<time>))
    if err != nil {
        log.Fatal(err.Error())
    }
    fmt.Println("Public link:", req.URL)
}

Specify:

• <access_key> — value of the Access key field from the S3 key;
• <secret_key> — value of the Secret key field from the S3 key;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <pool> — pool where the bucket is located;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link validity period, for example, 24*time.Hour.

Get a permanent link via a script

Python

Script example:

import boto3

def get_public_url(bucket_uuid: str, object_key: str) -> str:
    
    return f"https://{bucket_uuid}.selstorage.ru/{object_key}"

if __name__ == "<file_name>":
    bucket_uuid = "<uuid>"
    object_key = "<path_to_object>"
    url = get_public_url(bucket_uuid, object_key)
    print("Public URL:", url)

Specify:

• <file_name> — Python file name;
• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

PHP

Script example:

<?php
function get_public_url(string $bucket_uuid, string $object_key): string {
    return "https://{$bucket_uuid}.selstorage.ru/{$object_key}";
}

$bucket_uuid = "<uuid>";
$object_key = "<path_to_object>";

$public_url = get_public_url($bucket_uuid, $object_key);
echo "Public URL: " . $public_url . PHP_EOL;

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

JavaScript

Script example:

function getPublicUrl(bucketUuid, objectKey) {
    return `https://${bucketUuid}.selstorage.ru/${objectKey}`;
}

const bucketUuid = "<uuid>";
const objectKey = "<path_to_object>";

const publicUrl = getPublicUrl(bucketUuid, objectKey);
console.log("Public URL:", publicUrl);

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

Java

Script example:

public class ServercorePublicLink {

    public static String getPublicUrl(String bucketUuid, String objectKey) {
        return "https://" + bucketUuid + ".selstorage.ru/" + objectKey;
    }

    public static void main(String[] args) {

        String bucketUuid = "<uuid>";
        String objectKey = "<path_to_object>";

        String publicUrl = getPublicUrl(bucketUuid, objectKey);
        System.out.println("Public URL: " + publicUrl);
    }
}

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

Go

Script example:

package main

import (
    "fmt"
)

func getPublicURL(bucketUUID, objectKey string) string {
    return fmt.Sprintf("https://%s.selstorage.ru/%s", bucketUUID, objectKey)
}

func main() {

    bucketUUID := "<uuid>"
    objectKey := "<path_to_object>"

    publicURL := getPublicURL(bucketUUID, objectKey)
    fmt.Println("Public URL:", publicURL)
}

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.