Problem definition

When Bamboo plan uses S3 artifact handler, the UI allows to download artifacts stored in S3 by providing a redirect link to the S3 bucket.

The link is provided after permission validation, however:

• in case access to the bucket is restricted to only the IP of Bamboo the download is not possible.
• if the S3 bucket is accessible, the redirect link can be shared with users that do not have permissions to see/download the artifact.

Suggested solution

Implement a mechanism that allows downloading S3 artifacts from Bamboo server without direct access to the S3 bucket.