S3 private files for multiple users

Hi,

I do manage to store private files but only the owner can get these files (with Storage.vault(key)) with AWS Cognito authentication and verification (JWT).

How to get these files for multiple authorized users like for a chat application ?

I want that only members can get images :

type Conversation

  @model(subscriptions: { level: public })
  @auth(
    rules: [
      { allow: owner, ownerField: "members" }
      { allow: groups, groups: ["admin"], operations: [read] }
    ]
  ) {
  id: ID!
  **members: [String!]!**
  user: User @connection(name: "UserConversations")
  messages: [Message] @connection(name: "ConversationMessages")
  createdAt: String
  updatedAt: String
}

[rudyhadoux]

Hi, I finally use pre-signed URLs (with TTL). I put the URL in a private member of an Amplify object.

[akshbhu]

Hi @rudyhadoux

I think to access S3 private files in your chat application, you can give access to them via Presigned urls.

These are the steps that you can follow

1. Store the image in S3
2. Do a mutation to create the User in the GraphQL API using the image id
3. Query the image data from the API using image id
4. Get a signed URL for the image from S3.

With this url members user will be able to access private images in S3.

Let me know if this works or related to your question.