I'm wanting to store lots of data in cloud storage - like S3.
I want some data to only be accessed by authorised users, one way I could do this is to authenticate the user on my service, download the data from the cloud to my server, and serve the data to the user. This seems innefficient - as my server has to both upload/download the content.
I'd rather the user directly download the data from the cloud - is there a standard technique for handling this?
I was hoping maybe there was a way to hook in my Oauth2 provider to my cloud storage so they can easily authenticate downloads - cant find anything like this. Maybe I'll use short-lived pre-signed URLs, that I'd have to generate for every download