Token

Single-Use S3 Presigned URLs: Fix the Credential, Not the Timer

Single-use S3 presigned URLs replace an unrevocable bearer link with a revocable token. The whole design rests on one DynamoDB conditional write — verify it fir

Jun 17, 2026 Marcus Chen 11 min read