Get a link to an object

Last update: September 01 2026Open in Markdown

You can:

• get a link to an object in a public bucket — all objects are available through public domains of the storage;
• get a link to an object in a private bucket — the link can be permanent or temporary.

We do not recommend using Cyrillic characters in object names. If you use Cyrillic, encode the Cyrillic part of the link to work with such objects.

Get a link to an object in a public bucket

1. In the control panel, on the top menu, click Products and select S3.
2. Go to the Buckets section.
3. Open the bucket page → Objects tab.
4. In the object line, click .
5. In the link line, click .

Get a link to an object in a private bucket

You can:

• create a permanent or temporary link in the control panel. The link will be saved to a special bucket links as an object with the same name as the object the link points to. The object can be accessed via the bucket public domain links;
• obtain a temporary link via a presigned URL;
• obtain a permanent link via a script;
• obtain a permanent or temporary link using tools, for example, Rclone, AWS CLI, Cyberduck and S3 Browser.

Create a link in the control panel

You can get a temporary or permanent link to an object in a private bucket.

An object in a private bucket will be available via a link like https://<bucket_public_domain>/<object_name>, where:

• <bucket_public_domain> — the bucket public domain;
• <object_name> — the object name.

When you create a link to an object in a private bucket for the first time, a public bucket named links is automatically created in the project. The created link is added to it as an object with the same name as the main object. Objects in the links bucket have zero size and do not consume storage volume. If you set up the link as temporary, the object with the link will be automatically removed from the links bucket when the link expires.

To create a link:

1. In the control panel, on the top menu, click Products and select S3.

2. Go to the Buckets section.

3. Open the bucket page → Objects tab.

4. In the object menu, select Open Access.

5. Optional: in the Link address field, change the object name that will be displayed in the link, or leave it as is.

6. Optional: to ensure the link can only be used once, select the One-time link checkbox.

7. Optional: to restrict the link lifetime, select the Time restrictions checkbox and choose one of the following:

   • Delete after — the link will expire after the specified period of time after creation;
   • Delete at a specific time — the link will expire at the selected date and time.

8. Click Create link.

9. To copy the link, click . You will be able to copy it later in the links.

Get a temporary link via a presigned URL

Use AWS SDK presigned URLs (Presigned URLs) to obtain a temporary link to an object. For more information, see the Sharing objects with presigned URLs article in the AWS documentation.

Python

Script example:

import boto3

ACCESS_KEY = "<access_key>"      
SECRET_KEY = "<secret_key>"      
ENDPOINT_URL = "<s3_domain>" 
BUCKET_NAME = "<bucket_name>"       
OBJECT_KEY = "<path_to_object>"      
EXPIRES_IN = "<time>"

s3 = boto3.client(
    "s3",
    aws_access_key_id=ACCESS_KEY,
    aws_secret_access_key=SECRET_KEY,
    endpoint_url=ENDPOINT_URL,
)

url = s3.generate_presigned_url(
    ClientMethod="get_object",
    Params={"Bucket": BUCKET_NAME, "Key": OBJECT_KEY},
    ExpiresIn=EXPIRES_IN
)

print("\PresignedUrl
:")
print(url)

Specify:

• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <s3_domain> — the S3 API domain depending on the pool where the bucket is located;
• <bucket_name> — the bucket name;
• <path_to_object> — the path to the object in the bucket;
• <time> — the link lifetime in seconds.

PHP

Script example:

<?php
require 'vendor/autoload.php';

use Aws\S3\S3Client;
use Aws\Exception\AwsException;

$selectelS3 = new S3Client([
    'version' => 'latest',
    'region'  => '<pool>',
    'endpoint' => '<s3_domain>':,
    'use_path_style_endpoint' => true,
    'credentials' => [
        'key'    => '<access_key>',
        'secret' => '<secret_key>',
    ],
]);

$bucket = '<bucket_name>';
$key = '<path_to_object>';

try {
    $cmd = $selectelS3->getCommand('GetObject', [
        'Bucket' => $bucket,
        'Key'    => $key
    ]);

    $request = $selectelS3->createPresignedRequest($cmd, '<time>');
    $presignedUrl = (string)$request->getUri();

    echo "Public link: $presignedUrl\n";
} catch (AwsException $e) {
    echo "Error generating link: " . $e->getMessage() . "\n";
}

Specify:

• <pool> — the pool where the bucket is located;
• <s3_domain> — the S3 API domain depending on the pool where the bucket is located;
• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <bucket_name> — the bucket name;
• <path_to_object> — the path to the object in the bucket;
• <time> — link lifetime, for example +1 hour.

JavaScript

Script example:

import { S3Client, GetObjectCommand } from "@aws-sdk/client-s3";
import { getSignedUrl } from "@aws-sdk/s3-request-presigner";

const client = new S3Client({
region: "<pool>",
endpoint: "<s3_domain>",
forcePathStyle: true,
credentials: {
    accessKeyId: "<access_key>",
    secretAccessKey: "<secret_key>",
},
});

async function generatePresignedUrl() {
const bucket = "<bucket_name>";   
const key = "<path_to_object>";          

const command = new GetObjectCommand({ Bucket: bucket, Key: key });

const url = await getSignedUrl(client, command, { expiresIn: <time> });
console.log("Presigned URL:", url);
}

generatePresignedUrl().catch(console.error);

Specify:

• <pool> — the pool where the bucket is located;
• <s3_domain> — the S3 API domain depending on the pool where the bucket is located;
• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <bucket_name> — the bucket name;
• <path_to_object> — the path to the object in the bucket;
• <time> — the link lifetime in seconds.

Java

Script example:

package com.example;

import software.amazon.awssdk.auth.credentials.AwsBasicCredentials;
import software.amazon.awssdk.auth.credentials.StaticCredentialsProvider;
import software.amazon.awssdk.regions.Region;
import software.amazon.awssdk.services.s3.S3Client;
import software.amazon.awssdk.services.s3.model.GetObjectRequest;
import software.amazon.awssdk.services.s3.model.S3Exception;
import software.amazon.awssdk.services.s3.presigner.S3Presigner;
import software.amazon.awssdk.services.s3.presigner.model.GetObjectPresignRequest;
import software.amazon.awssdk.services.s3.presigner.model.PresignedGetObjectRequest;

import java.net.URI;
import java.time.Duration;

public class SelectelS3PresignedUrlGenerator {
    public static void main(String[] args) {

        String endpoint = "<s3_domain>"; 
        String region = "<pool>";
        String accessKey = "<access_key>";
        String secretKey = "<secret_key>";
        String bucketName = "<bucket_name>";
        String objectKey = "<path_to_object>";

        StaticCredentialsProvider credentials = StaticCredentialsProvider.create(
                AwsBasicCredentials.create(accessKey, secretKey)
        );

        S3Client s3Client = S3Client.builder()
                .endpointOverride(URI.create(endpoint))
                .region(Region.of(region))
                .credentialsProvider(credentials)
                .build();

        S3Presigner presigner = S3Presigner.builder()
                .endpointOverride(URI.create(endpoint))
                .region(Region.of(region))
                .credentialsProvider(credentials)
                .build();

        try {
            GetObjectRequest getObjectRequest = GetObjectRequest.builder()
                    .bucket(bucketName)
                    .key(objectKey)
                    .build();

            GetObjectPresignRequest presignRequest = GetObjectPresignRequest.builder()
                    .signatureDuration(Duration.ofMinutes(<time>))
                    .getObjectRequest(getObjectRequest)
                    .build();

            PresignedGetObjectRequest presignedRequest = presigner.presignGetObject(presignRequest);

            System.out.println("Presigned URL: " + presignedRequest.url());
            System.out.println("Expires at: " + presignedRequest.expiration());

        } catch (S3Exception e) {
            System.err.println("Error generating presigned URL: " + e.awsErrorDetails().errorMessage());
        } finally {
            s3Client.close();
            presigner.close();
        }
    }
}

Specify:

• <s3_domain> — the S3 API domain depending on the pool where the bucket is located;
• <pool> — the pool where the bucket is located;
• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <bucket_name> — the bucket name;
• <path_to_object> — the path to the object in the bucket;
• <time> — the link lifetime in minutes.

Go

Script example:

package main 
import (
    "context"
    "fmt"
    "log"
    "time"
    "github.com/aws/aws-sdk-go-v2/aws"
    "github.com/aws/aws-sdk-go-v2/config"
    "github.com/aws/aws-sdk-go-v2/credentials"
    "github.com/aws/aws-sdk-go-v2/service/s3"
)
func main() {
    cfg, err := config.LoadDefaultConfig(context.TODO(),
        config.WithCredentialsProvider(
            credentials.NewStaticCredentialsProvider("<access_key>", "<secret_key>", ""),
        ),
    )
    if err != nil {
        log.Fatal(err.Error())
    }
    client := s3.NewFromConfig(cfg, func(o *s3.Options) {
        o.BaseEndpoint = aws.String("<s3_domain>")
        o.Region = "<pool>"
    })
    presignClient := s3.NewPresignClient(client)
    req, err := presignClient.PresignGetObject(context.TODO(), &s3.GetObjectInput{
        Bucket: aws.String("<bucket_name>"),
        Key:    aws.String("<path_to_object>"),
    }, s3.WithPresignExpires(<time>))
    if err != nil {
        log.Fatal(err.Error())
    }
    fmt.Println("Public link:", req.URL)
}

Specify:

• <access_key> — the value of the Access key field from the S3 key;
• <secret_key> — the value of the Secret key field from the S3 key;
• <s3_domain> — the S3 API domain depending on the pool where the bucket is located;
• <pool> — the pool where the bucket is located;
• <bucket_name> — the bucket name;
• <path_to_object> — the path to the object in the bucket;
• <time> — the link lifetime, for example 24*time.Hour.

Get a permanent link via script

Python

Script example:

import boto3

def get_public_url(bucket_uuid: str, object_key: str) -> str:
    
    return f"https://{bucket_uuid}.selstorage.ru/{object_key}"

if __name__ == "<file_name>":
    bucket_uuid = "<uuid>"
    object_key = "<path_to_object>"
    url = get_public_url(bucket_uuid, object_key)
    print("Public URL:", url)

Specify:

• <file_name> — the Python file name;
• <uuid> — the unique bucket identifier, can be viewed in the bucket public domain;
• <path_to_object> — the path to the object in the bucket.

PHP

Script example:

<?php
function get_public_url(string $bucket_uuid, string $object_key): string {
    return "https://{$bucket_uuid}.selstorage.ru/{$object_key}";
}

$bucket_uuid = "<uuid>";
$object_key = "<path_to_object>";

$public_url = get_public_url($bucket_uuid, $object_key);
echo "Public URL: " . $public_url . PHP_EOL;

Specify:

• <uuid> — the unique bucket identifier, can be viewed in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

JavaScript

Script example:

function getPublicUrl(bucketUuid, objectKey) {
    return `https://${bucketUuid}.selstorage.ru/${objectKey}`;
}

const bucketUuid = "<uuid>";
const objectKey = "<path_to_object>";

const publicUrl = getPublicUrl(bucketUuid, objectKey);
console.log("Public URL:", publicUrl);

Specify:

• <uuid> — the unique bucket identifier, can be viewed in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

Java

Script example:

public class SelectelPublicLink {

    public static String getPublicUrl(String bucketUuid, String objectKey) {
        return "https://" + bucketUuid + ".selstorage.ru/" + objectKey;
    }

    public static void main(String[] args) {

        String bucketUuid = "<uuid>";
        String objectKey = "<path_to_object>";

        String publicUrl = getPublicUrl(bucketUuid, objectKey);
        System.out.println("Public URL: " + publicUrl);
    }
}

Specify:

• <uuid> — the unique bucket identifier, can be viewed in the bucket public domain;
• <path_to_object> — path to the object in the bucket.

Go

Script example:

package main

import (
    "fmt"
)

func getPublicURL(bucketUUID, objectKey string) string {
    return fmt.Sprintf("https://%s.selstorage.ru/%s", bucketUUID, objectKey)
}

func main() {

    bucketUUID := "<uuid>"
    objectKey := "<path_to_object>"

    publicURL := getPublicURL(bucketUUID, objectKey)
    fmt.Println("Public URL:", publicURL)
}

Specify:

• <uuid> — the unique bucket identifier, can be viewed in the bucket public domain;
• <path_to_object> — path to the object in the bucket.