Create an expiring MinIO download link from Blesta
Create a PD MinIO S3 share link when someone needs one object without receiving the service’s storage secret. A download link signs a GET request for that specific object.
Generate the intended link
- Open the service’s Share links section.
- Select the intended service bucket.
- Enter the exact object key, including any folder-like prefix.
- Choose download and a suitable expiry.
- Generate the link, then verify the intended file before sharing it privately.
The object must already exist at that key. A presigned URL is not a whole-bucket listing or a credential that should be reused in an application’s general connection settings.
Treat the whole URL as access
Anyone holding a valid link can use its signed operation while it remains valid. Expiry does not make it automatically single-use. Choose a short useful lifetime and avoid posting the URL in public pages, analytics or support tickets.
Use the complete generated API hostname and query string. Rewriting the link to a Console address, another hostname or a shortened object path can invalidate the signature. The recipient must also be able to reach that endpoint.
Check early failures
Credential rotation, suspension, termination or a changed object can affect the link before its displayed expiry. Inspect the actual service and object rather than extending a failed link repeatedly.
For a failure, retain the service, object reference, operation time and redacted error privately. Keep the full signed URL out of diagnostics. Use the endpoint guide when the recipient cannot reach the issued host.
Check the download link
Your hosting team should compare the intended service bucket, exact object key and signed GET operation with the recipient’s redacted error and the current object/access state. Check endpoint reachability, unchanged hostname/path, expiry and any intervening key rotation, suspension or termination; a generated link is not proof of a successful object read and is not automatically single-use. Extending or repeatedly regenerating a link cannot repair the underlying access or network cause.
See the PD MinIO S3 Blesta guide for related tasks, or explore the module.
