If you want to provide temporary access to an object that’s otherwise private, you can gen- erate a presigned URL. The URL will be usable for a specified period of time, after which it will become invalid. You can build presigned URL generation into your code to provide object access programmatically.
The following AWS CLI command will return a URL that includes the required authen- tication string. The authentication will become invalid after 10 minutes (600 seconds). The default expiration value is 3,600 seconds (one hour).
aws s3 presign s3://MyBucketName/PrivateObject –expires-in 600

AWS Certified Solutions Architect Study Guide: Associate SAA-C02 Exam (Aws Certified Solutions Architect Official: Associate Exam) (English Edition)