S3 Bucket 对象根据 Discourse 群组的限制访问策略

[Andrea_Giovacchini]

阅读 设置文件和图片上传到 S3 后，我已配置了 Amazon S3 存储桶和 Discourse，但尚未找到一种方法，使 S3 对象保持“私有”，即只有能够访问包含这些图片/文件的帖子的 Discourse 用户才能访问这些对象。

我的意思是，我为工作设置了一个需要登录才能访问的 Discourse 实例，但我不希望某个能够访问某些 S3 对象的用户将链接传递给无法访问该对象的人。

[Benjamin_D (Benjamin Decotte)]

您好！
请查看 secure media 参数，并参考：

Secure Uploads

Added in the Discourse 2.4 release in February is the Secure Uploads feature, which provides a higher degree of security for ALL uploads (images, video, audio, text, pdfs, zips, and others) within a Discourse instance. Prerequisites You must have S3 uploads enabled on your site, which needs the following settings to be filled: S3 access key id S3 secret access key S3 region S3 upload bucket You also must be using an S3 bucket that does not have a Public bucket policy, and you need to make su…

[Andrea_Giovacchini]

非常感谢，我通过搜索没有找到该主题。这正是我需要的。