How do I make a presigned url on a S3 bucket (upload) ?

[Prince2k3]

I am running into an issue with getting a presigned url to work for uploading. At first I got 403 Forbidden. I then tried adding a header
x-amz-acl with the value of public-read. That then gave me a Signature Do Not Match error. I am really stuck here. Any help would be appreciated! I've been on this all week. Finally bit the bullet to ask.

[0xTim]

What does your URL sign code and client upload code look like?

[Prince2k3]

I have full admin access to everything according to IAM group that I am under. I tried the AWS CLI route and that works too

[adam-fowler]

Can you use the AWSClient to upload to S3?
How are you providing the AWS credentials to the AWSClient?

[Prince2k3]

From the documentation around using AWSClient with Lambda functions, it said I didn't have to do anything as far as credentials as it pulls the info from the headers.

extension AWSRequestHandling {
    
func handle(_ event: Request, context: LambdaContext) async throws -> Response {
        guard canHandle(event) else { return abort(.notFound) }

        context.logger.info("Initializing AWS Client...")

        let client = AWSClient(httpClientProvider: .createNewWithEventLoopGroup(context.eventLoop))

        defer {
            context.logger.info("Shutting down AWS Client")
            try! client.syncShutdown()  
        }

        return try await handle(event, context: context, client: client)
    }
}

[adam-fowler]

Ah I didn't know you were running a lambda. It will pull credentials from lambda environment variables. Given you are running a lambda have you checked the lambda execution role has access to your s3 bucket?

[Prince2k3]

@adam-fowler setting that up on the lambda worked. I didn’t know I had to do that. Thanks for helping me there. Also thank you @0xTim