S3 Bucket objects restricted access policy as per Discourses groups

[Andrea_Giovacchini]

Reading Setting up file and image uploads to S3 I’ve setup the Amazon S3 Bucket and Discourse but I haven’t figured out a way to make S3 objects “private” in the way that only Discourse users that can access the posts that contain that images / files can access the objects.

I mean, I’ve setup a Discourse for work which requires login for accessing and I don’t like that a user that can access some S3 object can pass a link to someone that can’t

[Benjamin_D (Benjamin Decotte)]

Hi !
see the secure media parameter and

Secure Media Uploads

Added in the Discourse 2.4 release in February is the Secure Media feature, which provides a higher degree of security for ALL uploads (images, video, audio, text, pdfs, zips, and others) within a Discourse instance. Prerequisites You must have S3 uploads enabled on your site, which needs the following settings to be filled: S3 access key id S3 secret access key S3 region S3 upload bucket You also must be using an S3 bucket that does not have a Public bucket policy, and you need to make sure…

[Andrea_Giovacchini]

thank you so much I haven’t found that topic by searching. It is what I need