KMMBridgeartifactsS3 Public Artifacts

S3 Public Artifacts

You can publish artifacts to AWS S3. However, there is no easy way to make them private using auth options available out of the box for S3. Therefore, artifacts in S3 will have publicly readable URLs. Those URLs are generated with a random UUID, so they’re essentially unguessable, but that’s an important restriction.

Configuration

kmmbridge {
    s3PublicArtifacts(
        "us‑east‑1",
        "my-kmm-artifacts",
        "[ACCESS_KEY]",
        "[SECRET_ACCESS_KEY]"
    )
}

Parameters:

  • region: the AWS region
  • bucket: the S3 bucket
  • accessKeyId: IAM access key (should probably be a repo secret)
  • secretAccessKey: IAM secret key (should definitely be a repo secret)
  • makeArtifactsPublic: optional boolean. Defaults to true. Can keep URL’s private, but out of the box, there is no way to authenticate clients for access.
  • altBaseUrl: optional alternative base URL.

Considerations

We generally wouldn’t use this option unless we’re publishing a public repo. However, if you have alternative ways of securing and authenticating an S3 bucket, this is a good option.