Link build artifacts to commit build in S3 bucket without public access

[Daniel Saavedra]

I have followed the instructions in:

https://confluence.atlassian.com/bitbucket/publish-and-link-your-build-artifacts-872137736.html

To have my build artifacts link to the build results stored in S3 buckets and it works...

But my problem is I don't want to set those s3 objects to public access as we want to maintain those artifacts private... So if I click on the link an access denied message appears and if I change permissions to public then it works...

Could I somehow make the request URL use a key pair created in AWS IAM so these links only worked when opened through bitbucket as a logged in user? Could it maybe use enviroment variables defined to do the authentication?

---

As a side note. I have seen that aws s3 is directly used in some cases (for web deployment to S3 for example) and in others the helper s3_upload.py script... Which method should be prefered in general? Shouldn't be documentation unified (I find easier using awscli than adding a script to my repo)