Download large file fro s3 - are not
department-of-veterans-affairs / caseflow-efolder
After fiddling with https://github.com/vala/s3streamer, I was unable to find a working solution in Rails 4.
However, I have another solution working:
A much simpler approach is to have Rails generate a presigned S3 URL that expires in a short period of time (say 60s). After a quick prototype, I was able to get this to work with the following changes.
I have discussed this with @shanear before and the ATO issue has come up. However, after giving it a good thought, I am not sure how this is any less secure than our current approach.
The key difference is that user will be downloading directly from S3 instead of going through our VPN tunnel.
Update: 2017/05/05
Also discussed this with @ShawnArnwine, and his response is that this is certainly a grey area. We need to consult our Security Plan and our ISO for advice if we are going this route.
-
-
-