---
title: "Discussion on \"Securely Upload Files to S3 for Guests Using AWS Cognito\" | Hashnode"
description: "Discussion on \"Securely Upload Files to S3 for Guests Using AWS Cognito\". For security reasons, if you allow guest users to upload files from your app, it's better to use Guest Access from AWS Cognito instead of a direct AWS Access Key from an IAM User.\nWhy?\n\nAn IAM User access key is long-lived and never expires.\n\nWith AW..."
url: "https://hashnode.com/posts/aws-amplify-deploy-permissions/697c3cafe47a2ecb11840ffd"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Securely Upload Files to S3 for Guests Using AWS Cognito](https://blog.phuongphung.com/aws-amplify-deploy-permissions?utm_source=hashnode&utm_medium=feed)

For security reasons, if you allow guest users to upload files from your app, it's better to use Guest Access from AWS Cognito instead of a direct AWS Access Key from an IAM User. Why? An IAM User access key is long-lived and never expires. With AW...

Jan 30 · 2 min read · blog.phuongphung.com  
Read the article

-   [#aws](https://hashnode.com/tag/aws)
-   [#nextjs](https://hashnode.com/tag/nextjs)
-   [#amazon-s3](https://hashnode.com/tag/amazon-s3)
-   [#amazon-cognito](https://hashnode.com/tag/amazon-cognito)

## Written by

[Phuong Phung](https://hashnode.com/@fuongz)

@fuongz · Ho Chi Minh, Viet Nam

  
[View profile](https://hashnode.com/@fuongz)

Software Engineer at Hiip

## Responses

Markdown supported · ⌘↵ to post

No responses yet.