I use express and nodejs as backend , i upload the images/files in aws s3 using aws-sdk client and while retrieving and sending it to frontend i send a presigned url of the images everytime. My question is , is it safe ? because the url contains the bucketname and region along with other elements. I don’t want the users/any other person to know what’s happening. Is there a better method or anything to solve it ?
I was thinking of just sending the key of file in aws like “uploads/images/image.jpg” as a response instead of presigned url and have the client-side hit a fetch when they want to view image. But few problems arise i guess, i have many images attached to the a particular request, will it be a burder on server if the client keeps hitting the server for every image instead of presigned url which can directly fetch from aws. and will it be seemless incase of carousel view ?
using presigned url is great but i dont want to show the aws credentials in it.