30 second expiration time of URL's to S3 links?


#1

We currently have a tool which has worked for 2 years using the FreeAgent API. Our latest use of the tool did not produce the results we expected. We think we have narrowed it down to the expiration time of the S3 URL, which appears to be 30 seconds.

Is the expiration date of the URL something that was changed recently?
Can the expiration date be extended?


#2

Hi Jonathan,

Thanks for your message and sorry to hear you’ve had some trouble with your integration. I’ve checked with our teams internally and we recently reduced the TTL on our Amazon S3 URLs to 30 seconds, based on feedback from an independent Penetration Test of FreeAgent’s infrastructure.

From your description of the problem, I wonder if your integration currently compiles a list of files to be fetched and then downloads from S3 in a batch process? I’m afraid tweaking the TTL of the links isn’t currently available via the API. Would you be able to update your integration to download the files on-the-fly, before the S3 links have time to expire?

I hope this helps and sorry for the confusion, Jonathan!

Kind regards,
Dave J


#3

Hi David,

Thanks for the insights on the changes.

We have implemented a workaround that seems to be working now. The solution we came up with is to make a request against the attachment URL in a synchronous way, which should fingers crossed mean we get the attachment back in time.

You mentioned that

… tweaking the TTL of the links isn’t currently available via the API

is this something that will be available in the future?

Regards,

Jonathan


#4

Hi Jonathan,

Great to hear you managed to update your integration :+1:

Honestly, I don’t think we have any plans to increase the TTL on our S3 links - the links are deliberately short-lived to prevent unauthorised access to assets should the URLs fall into the wrong hands. I will, however, be keeping an eye out for other API users encountering issues like yourself so we strike the right balance between security and convenience.

Thanks again for your feedback and glad to hear you’re back up and running.

Kind regards,
Dave J