If you use S3 to store files then the chances are at some point you’ll be
letting users download these files themselves. If you don’t want to fetch the
file yourself and you want to send the user directly to S3 to download it - you
can do this securely using pre-signed URLs. In short, a temporary URL is
generated to allow the user access to the file and it has a timed expiry.
If you’re normalising and storing your files with something like this structure:
file_id file_name file_type aws_path
1022 sample pdf uploaded/documents/1022.pdf
1023 budget xlsx uploaded/documents/1023.xlsx
If you were sending the user to S3 directly, they’d be given a file to download
of 1022.pdf - hardly an ideal filename. You can modifying the filename for the
user when you create the pre-signed URL, like so:
$s3Client = new Aws\S3\S3Client([
'profile' => 'default',
'region' => 'us-east-2',
'version' => '2006-03-01',
$cmd = $s3Client->getCommand('GetObject', [
'Bucket' => 'my-bucket',
'Key' => 'testKey',
'ResponseContentDisposition' => 'attachment; filename=sample.pdf'
$url = $s3Client->createPresignedRequest($cmd, '+20 minutes');
Header("Location: ".$url); exit();
Once you then forward the user to the give URL they will be given a download
with the correct file name.