DEV Community

Discussion on: GraphQL Tutorial - How to Manage Image & File Uploads & Downloads with AWS AppSync & AWS Amplify

Collapse
 
dabit3 profile image
Nader Dabit

Yes, if you set a bucket of folder in a bucket public, anyone can read from that bucket. I put a warning letting the readers know about this as it is not recommended by AWS security policy, but many people ask for or want this functionality so I showed how it could be done as well.

Collapse
 
sakhmedbayev profile image
sakhmedbayev

Can public users of the S3 bucket just read from it or write into it as well? How to make it more secure?

Thread Thread
 
dabit3 profile image
Nader Dabit • Edited

Ah, no they would only be able to read from it using the instructions here. To make it secure from reads as well, see the other example I provided in this tutorial.