---
title: "Mint a short-lived presigned GET URL for a private S3 object after ACL check"
method: GET
path: "/v1/protected-assets/{prefix}/{uuid}/{filename}"
tags: ["Protected Assets"]
---

# Mint a short-lived presigned GET URL for a private S3 object after ACL check

`GET /v1/protected-assets/{prefix}/{uuid}/{filename}`

## Path parameters

- `prefix` string, required
- `uuid` string, required
- `filename` string, required

## Response `200`

- ProtectedAssetUrlDto
  - `url` string, required — Short-lived presigned GET URL for the private asset
  - `expiresInSeconds` number, required — Lifetime of the presigned URL in seconds

## Other responses

- `400` — Validation failed
- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not found
- `409` — Conflict
- `500` — Internal server error

---

[API](https://skmtc.net/vendure/apis/vendure-io-api-public.md) · [All operations](https://skmtc.net/vendure/apis/vendure-io-api-public/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/vendure/vendure-io-api-public/revisions/5fc4757128af/schema)