Get a link to an object

Last update: July 17 2026

You can:

• get a link to an object in a public bucket — all objects are available through public domains of the storage;
• get a link to an object in a private bucket — the link can be permanent or temporary.

We do not recommend using Cyrillic characters in object names. If you use Cyrillic, encode the part of the link containing Cyrillic characters to work with links to such objects.

Get a link to an object in a public bucket

1. In the control panel, on the top menu, click Products and select S3.
2. Go to the Buckets section.
3. Open the bucket page → Objects tab.
4. In the object row, click .
5. In the link row, click .

Get a link to an object in a private bucket

You can:

• create a permanent or temporary link in the control panel. The link will be saved in a special links bucket as an object with the same name as the object the link points to. The object will be accessible via the bucket public domain links;
• get a temporary link via a presigned URL;
• get a permanent link via script;
• get a permanent or temporary link using tools, for example Rclone, AWS CLI, Cyberduck and S3 Browser.

Create a link in the control panel

You can get a temporary or permanent link to an object in a private bucket.

An object in a private bucket will be available via a link of the form https://<bucket_public_domain>/<object_name>, where:

• <bucket_public_domain> — bucket public domain;
• <object_name> — object name.

When you first create a link to an object in a private bucket, a public bucket named links is automatically created in your project. The created link is added to it as an object with the same name as the main object. Objects in the links bucket have zero size and do not consume storage volume. If you set the link as temporary, the object with the link will be automatically deleted from the links bucket when the link stops working.

To create a link:

1. In the control panel, on the top menu, click Products and select S3.

2. Go to the Buckets section.

3. Open the bucket page → Objects tab.

4. In the menu of the object, select Make public.

5. Optional: in the Link address field, change the object name that will appear in the link, or leave the current one.

6. Optional: to ensure the link can only be used once, select the One-time link checkbox.

7. Optional: to limit the link duration, select the Time limits checkbox and choose one of the options:

   • Delete after — the link will stop working after the selected time period from the moment of creation;
   • Delete at specified time — the link will stop working at the selected date and time.

8. Click Create link.

9. To copy the link, click . You can copy it later in the links bucket.

Get a temporary link via a presigned URL

You can get a temporary link to an object using AWS SDK presigned URLs (Presigned URLs). For more details, see the Sharing objects with presigned URLs guide in the AWS documentation.

Python

Script example:

import boto3

ACCESS_KEY = "<access_key>"      
SECRET_KEY = "<secret_key>"      
ENDPOINT_URL = "<s3_domain>" 
BUCKET_NAME = "<bucket_name>"       
OBJECT_KEY = "<path_to_object>"      
EXPIRES_IN = "<time>"

s3 = boto3.client(
    "s3",
    aws_access_key_id=ACCESS_KEY,
    aws_secret_access_key=SECRET_KEY,
    endpoint_url=ENDPOINT_URL,
)

url = s3.generate_presigned_url(
    ClientMethod="get_object",
    Params={"Bucket": BUCKET_NAME, "Key": OBJECT_KEY},
    ExpiresIn=EXPIRES_IN
)

print("\PresignedUrl
:")
print(url)

Specify:

• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link duration in seconds.

PHP

Script example:

<?php
require 'vendor/autoload.php';

use Aws\S3\S3Client;
use Aws\Exception\AwsException;

$selectelS3 = new S3Client([
    'version' => 'latest',
    'region'  => '<pool>',
    'endpoint' => '<s3_domain>':,
    'use_path_style_endpoint' => true,
    'credentials' => [
        'key'    => '<access_key>',
        'secret' => '<secret_key>',
    ],
]);

$bucket = '<bucket_name>';
$key = '<path_to_object>';

try {
    $cmd = $selectelS3->getCommand('GetObject', [
        'Bucket' => $bucket,
        'Key'    => $key
    ]);

    $request = $selectelS3->createPresignedRequest($cmd, '<time>');
    $presignedUrl = (string)$request->getUri();

    echo "Public link: $presignedUrl\n";
} catch (AwsException $e) {
    echo "Error generating link: " . $e->getMessage() . "\n";
}

Specify:

• <pool> — pool where the bucket is located;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link duration, for example +1 hour.

JavaScript

Script example:

import { S3Client, GetObjectCommand } from "@aws-sdk/client-s3";
import { getSignedUrl } from "@aws-sdk/s3-request-presigner";

const client = new S3Client({
region: "<pool>",
endpoint: "<s3_domain>",
forcePathStyle: true,
credentials: {
    accessKeyId: "<access_key>",
    secretAccessKey: "<secret_key>",
},
});

async function generatePresignedUrl() {
const bucket = "<bucket_name>";   
const key = "<path_to_object>";          

const command = new GetObjectCommand({ Bucket: bucket, Key: key });

const url = await getSignedUrl(client, command, { expiresIn: <time> });
console.log("Presigned URL:", url);
}

generatePresignedUrl().catch(console.error);

Specify:

• <pool> — pool where the bucket is located;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link duration in seconds.

Java

Script example:

package com.example;

import software.amazon.awssdk.auth.credentials.AwsBasicCredentials;
import software.amazon.awssdk.auth.credentials.StaticCredentialsProvider;
import software.amazon.awssdk.regions.Region;
import software.amazon.awssdk.services.s3.S3Client;
import software.amazon.awssdk.services.s3.model.GetObjectRequest;
import software.amazon.awssdk.services.s3.model.S3Exception;
import software.amazon.awssdk.services.s3.presigner.S3Presigner;
import software.amazon.awssdk.services.s3.presigner.model.GetObjectPresignRequest;
import software.amazon.awssdk.services.s3.presigner.model.PresignedGetObjectRequest;

import java.net.URI;
import java.time.Duration;

public class SelectelS3PresignedUrlGenerator {
    public static void main(String[] args) {

        String endpoint = "<s3_domain>"; 
        String region = "<pool>";
        String accessKey = "<access_key>";
        String secretKey = "<secret_key>";
        String bucketName = "<bucket_name>";
        String objectKey = "<path_to_object>";

        StaticCredentialsProvider credentials = StaticCredentialsProvider.create(
                AwsBasicCredentials.create(accessKey, secretKey)
        );

        S3Client s3Client = S3Client.builder()
                .endpointOverride(URI.create(endpoint))
                .region(Region.of(region))
                .credentialsProvider(credentials)
                .build();

        S3Presigner presigner = S3Presigner.builder()
                .endpointOverride(URI.create(endpoint))
                .region(Region.of(region))
                .credentialsProvider(credentials)
                .build();

        try {
            GetObjectRequest getObjectRequest = GetObjectRequest.builder()
                    .bucket(bucketName)
                    .key(objectKey)
                    .build();

            GetObjectPresignRequest presignRequest = GetObjectPresignRequest.builder()
                    .signatureDuration(Duration.ofMinutes(<time>))
                    .getObjectRequest(getObjectRequest)
                    .build();

            PresignedGetObjectRequest presignedRequest = presigner.presignGetObject(presignRequest);

            System.out.println("Presigned URL: " + presignedRequest.url());
            System.out.println("Expires at: " + presignedRequest.expiration());

        } catch (S3Exception e) {
            System.err.println("Error generating presigned URL: " + e.awsErrorDetails().errorMessage());
        } finally {
            s3Client.close();
            presigner.close();
        }
    }
}

Specify:

• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <pool> — pool where the bucket is located;
• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link duration in minutes.

Go

Script example:

package main 
import (
    "context"
    "fmt"
    "log"
    "time"
    "github.com/aws/aws-sdk-go-v2/aws"
    "github.com/aws/aws-sdk-go-v2/config"
    "github.com/aws/aws-sdk-go-v2/credentials"
    "github.com/aws/aws-sdk-go-v2/service/s3"
)
func main() {
    cfg, err := config.LoadDefaultConfig(context.TODO(),
        config.WithCredentialsProvider(
            credentials.NewStaticCredentialsProvider("<access_key>", "<secret_key>", ""),
        ),
    )
    if err != nil {
        log.Fatal(err.Error())
    }
    client := s3.NewFromConfig(cfg, func(o *s3.Options) {
        o.BaseEndpoint = aws.String("<s3_domain>")
        o.Region = "<pool>"
    })
    presignClient := s3.NewPresignClient(client)
    req, err := presignClient.PresignGetObject(context.TODO(), &s3.GetObjectInput{
        Bucket: aws.String("<bucket_name>"),
        Key:    aws.String("<path_to_object>"),
    }, s3.WithPresignExpires(<time>))
    if err != nil {
        log.Fatal(err.Error())
    }
    fmt.Println("Public link:", req.URL)
}

Specify:

• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <s3_domain> — S3 API domain depending on the pool where the bucket is located;
• <pool> — pool where the bucket is located;
• <bucket_name> — bucket name;
• <path_to_object> — path to the object in the bucket;
• <time> — link duration, for example 24*time.Hour.

Get a permanent link via script

Python

Script example:

import boto3

def get_public_url(bucket_uuid: str, object_key: str) -> str:
    
    return f"https://{bucket_uuid}.selstorage.ru/{object_key}"

if __name__ == "<file_name>":
    bucket_uuid = "<uuid>"
    object_key = "<path_to_object>"
    url = get_public_url(bucket_uuid, object_key)
    print("Public URL:", url)

Specify:

• <file_name> — name of the Python file;
• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

PHP

Script example:

<?php
function get_public_url(string $bucket_uuid, string $object_key): string {
    return "https://{$bucket_uuid}.selstorage.ru/{$object_key}";
}

$bucket_uuid = "<uuid>";
$object_key = "<path_to_object>";

$public_url = get_public_url($bucket_uuid, $object_key);
echo "Public URL: " . $public_url . PHP_EOL;

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

JavaScript

Script example:

function getPublicUrl(bucketUuid, objectKey) {
    return `https://${bucketUuid}.selstorage.ru/${objectKey}`;
}

const bucketUuid = "<uuid>";
const objectKey = "<path_to_object>";

const publicUrl = getPublicUrl(bucketUuid, objectKey);
console.log("Public URL:", publicUrl);

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

Java

Script example:

public class SelectelPublicLink {

    public static String getPublicUrl(String bucketUuid, String objectKey) {
        return "https://" + bucketUuid + ".selstorage.ru/" + objectKey;
    }

    public static void main(String[] args) {

        String bucketUuid = "<uuid>";
        String objectKey = "<path_to_object>";

        String publicUrl = getPublicUrl(bucketUuid, objectKey);
        System.out.println("Public URL: " + publicUrl);
    }
}

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

Go

Script example:

package main

import (
    "fmt"
)

func getPublicURL(bucketUUID, objectKey string) string {
    return fmt.Sprintf("https://%s.selstorage.ru/%s", bucketUUID, objectKey)
}

func main() {

    bucketUUID := "<uuid>"
    objectKey := "<path_to_object>"

    publicURL := getPublicURL(bucketUUID, objectKey)
    fmt.Println("Public URL:", publicURL)
}

Specify:

• <uuid> — unique bucket identifier, can be found in the bucket public domain;
• <path_to_object> — path to the object in the bucket.