Credentials

Scoped API tokens for R2: limit bucket access

Learn how scoped tokens restrict operations to specific buckets, replacing legacy keys to limit exposure during Cloudflare authentication workflows.

Jul 19, 2026

Alex Kumar 13 min read

Presigned URLs: Stop Reuse with Single-Use Tokens

Standard presigned URLs last up to 7 days, creating replay risks. Learn to enforce single-use access using DynamoDB conditional writes and serverless tokens.

Jul 14, 2026

Marcus Chen 14 min read