Vercel apps can now upload to S3 without long-lived AWS keys

Vercel's Amazon S3 Marketplace integration lets an app store uploaded files in S3 without embedding a permanent AWS access key in code or environment variables. The integration links an S3 resource to a Vercel project, provides connection details as environment variables, and authenticates using short-lived OIDC credentials. Developers still have to handle authorization, object key naming, file validation, and read permissions themselves. The integration is best suited to teams already using AWS, and it only works with buckets created through Vercel rather than arbitrary existing buckets. The article also stresses that the IAM role's permissions still govern what the credentials can do, so access should be limited to the required bucket and key prefix.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.


Discussion (0)
Log in to join the discussion and vote.
Log in