signature
query parameter. The signature is generated using your access key, secret key and the URL. When generating a signed URL, you can specify the expiration time of the URL.
A signed URL is valid for 1 hour by default.
Typical signed URL looks like this:
x-amz-meta-isprivatefile
as true to mark the file as private. Here’s the documentation