From Dev.to
Why Disabling Downloads Does Not Revoke a Signed URL
A photographer disables downloads for a private client gallery. The download button disappears immediately. An API test confirms that new download requests return 403. Then someone pastes a previously...