@@ -1131,14 +1131,17 @@ Available aggregations are:
11311131# # Asset Proxy
11321132
11331133The Asset Proxy feature enables stac-server to proxy access to S3 assets through the STAC
1134- API by generating requester-pays pre-signed URLs. Only assets with S3 URIs (`s3://`
1135- prefix) are proxied; other URL schemes are ignored. When the Asset Proxy feature is
1136- enabled, asset `href` values pointing to S3 are replaced with proxy endpoint URLs when an
1137- Item or Collection is served, while the original S3 URLs are preserved in the
1138- ` alternate.s3.href` field using the [Alternate Assets
1139- Extension](https://github.com/stac-extensions/alternate-assets). Subsequent GET requests
1140- to the proxy endpoint URLs are redirected to pre-signed S3 object URLS for download (the
1141- requester pays for S3 egress).
1134+ API by generating pre-signed URLs. Only assets with S3 URIs (`s3://` prefix) are proxied;
1135+ other URL schemes are ignored. When the Asset Proxy feature is enabled, asset `href`
1136+ values pointing to S3 are replaced with proxy endpoint URLs when an Item or Collection is
1137+ served, while the original S3 URLs are preserved in the `alternate.s3.href` field using
1138+ the [Alternate Assets Extension](https://github.com/stac-extensions/alternate-assets).
1139+ Subsequent GET requests to the proxy endpoint URLs are redirected to pre-signed S3 URLS
1140+ for download. Note that the AWS account that stac-server is running under must have
1141+ permission to access the S3 buckets containing the assets and that the stac-server AWS
1142+ account will be charged for the S3 egress, regardless of whether the bucket is a
1143+ " Requester Pays" bucket or not (the stac-server AWS account is the requester when
1144+ generating the pre-signed URL).
11421145
11431146# ## Configuration
11441147
0 commit comments