Bucket public access

[jeroenrinzema]

Hi, I was wondering if it’s possible to grant public download access to anonymous users using versitygw. While exploring the codebase, it seems like an Authorization header is always required, even when the access policy permits fetching objects.

For reference, here’s the policy I’m using:

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Principal": ["*"],
      "Action": "s3:GetObject",
      "Resource": "arn:aws:s3:::<bucket>/*"
    }
  ]
}

Is there a way to bypass the Authorization header for public access, or am I missing something?

[benmcclelland]

The "public" access still requires a valid access key. The "public" in this case is anyone with an account. If you want to give access to objects without needing to create accounts, then presigned urls is the way to achieve this.