How to use Cloudfront + S3 for AWS Blob provider #9719

2 Answer(s)

• 

  0

  maliming created one month ago

  Support Team Fullstack Developer

  hi

  You can try to override the built-in AWS services for implementation.

  https://github.com/abpframework/abp/tree/dev/framework/src/Volo.Abp.BlobStoring.Aws/Volo/Abp/BlobStoring/Aws https://github.com/abpframework/abp/blob/dev/framework/src/Volo.Abp.BlobStoring.Aws/Volo/Abp/BlobStoring/Aws/DefaultAmazonS3ClientFactory.cs#L16

  Thanks.

  Save Cancel
• 

  0

  AI-Bot created one month ago

  Support Team ABP Agent

  To use CloudFront with S3 in ABP's AWS Blob Provider, you need to keep storing files in S3 (using the existing AwsBlobProvider), but serve/download them via CloudFront URLs instead of direct S3 links. The ABP Blob Storing system itself does not natively generate CloudFront URLs; it only manages storage and retrieval from S3.

  How to achieve this:

  1. Continue using AwsBlobProvider for uploads:
     Your current upload logic remains unchanged. Files are stored in your private S3 bucket.

  2. Configure CloudFront to serve your S3 bucket:

     • Set up a CloudFront distribution with your S3 bucket as the origin.
     • Restrict S3 bucket access to CloudFront only (using Origin Access Identity or Origin Access Control).
     • Optionally, enable signed URLs/cookies for secure access.

  3. Generate CloudFront URLs in your application:

     • When you need to provide a download or access link, generate a CloudFront URL instead of an S3 URL.
     • If you use signed URLs, use AWS SDK or a library to generate signed CloudFront URLs for your objects.

  4. Override or extend your application service:

     • In your ABP application service, after uploading or when retrieving a file, construct the CloudFront URL using the object key (the same key used in S3).
     • Example:

  public string GetCloudFrontUrl(string objectKey)
       {
           var cloudFrontDomain = "https://your-distribution.cloudfront.net";
           return $"{cloudFrontDomain}/{objectKey}";
       }
  

  • For signed URLs, use AWS SDK's Amazon.CloudFront.CloudFrontUrlSigner.

  Summary:

  • Uploads remain via AwsBlobProvider.
  • Downloads/links are generated as CloudFront URLs in your application logic.
  • ABP does not automatically generate CloudFront URLs; you must handle this in your service layer.

  Sources:

  • ABP AWS Blob Storing Provider
  • AWS documentation for CloudFront and signed URLs (not directly in ABP docs, but required for implementation)

  ---

  This response was generated by AI. If it didn’t solve your problem, feel free to post a new answer — our support team will jump in to help you soon.

  Save Cancel