Share one object, not your credentials
There are three common ways to get a file out of a bucket, and two of them are bad. Making the bucket public exposes everything in it. Sending someone an access key gives them your permissions until you remember to rotate it. A presigned URL is the third option: a single link, scoped to one object, that stops working when it expires.
AnyStorage generates those links from the desktop. Select an object in a connected bucket, create a presigned download link, and send it. No console, no SDK snippet, no temporary IAM user.
Presigned uploads, not just downloads
The direction people forget is inbound. When a collaborator or a remote script needs to put a file into your bucket, the usual answer is provisioning credentials for a one-time transfer.
A presigned upload URL avoids that entirely. AnyStorage can generate one for a specific target path, so the other side can write exactly one object to exactly one prefix and nothing else. That covers client deliveries, CI jobs that need to publish an artifact, and any handoff where creating an account would be more work than the transfer itself.
Which storage services support it
Presigning is an object storage capability, so it is available on the connection types that implement it:
- Amazon S3 and S3-compatible endpoints such as MinIO and Wasabi
- Cloudflare R2
- Backblaze B2
- Google Cloud Storage
- Azure Blob Storage
- Aliyun OSS and Tencent COS
It is not available for local files, WebDAV, FTP/SFTP or consumer cloud drives, because those protocols have no equivalent signing mechanism. AnyStorage shows the option only where the connection actually supports it, rather than failing after you click.
Part of a normal file workflow
A presigned URL is most useful when it is one step in the work you were already doing, not a separate tool you have to go and find. In AnyStorage the link is generated from the same window where you browse buckets, preview files, and run uploads and downloads through the Transfer Station.
Connection credentials stay on the local machine. The app runs on macOS, Windows and Linux, and the link you produce is a plain URL that works anywhere — a browser, a curl command, or a script on a machine that has no access to your storage account at all.