Handling Large Blobs hard
Why should Presigned URLs have a short TTL (e.g., 15 minutes)?
- A To save memory.
- B Security (Least Privilege). If the URL is leaked or intercepted, the attacker's window of opportunity is minimized.
- C To force the user to pay again.
- D S3 requires it.
Answer: B. Security (Least Privilege). If the URL is leaked or intercepted, the attacker's window of opportunity is minimized.
Just-in-time access prevents permanent backdoors.
One system design question a day, with spaced repetition so the ones you miss come back.
Get the appRelated questions
- Why do modern sites serve images in WebP or AVIF format?
- What does the acronym BLOB stand for?
- Why do we sometimes convert binary images to Base64 strings?
- What is an 'Origin Shield' or 'Mid-Tier Cache' in a CDN architecture?
- For a feed with 100 images, why use 'Lazy Loading'?
- How does HLS/DASH handle a user moving from WiFi to 4G (Variable Bandwidth)?