storage.download.presigned-url

Issue a short-lived presigned GET URL for an existing audit-tracked storage object.

Overview

Property	Value
Workflow type	Atomic
Library	App-storage
Version	1.0

Input Schema

Field	Type	Required	Default	Description
organization_uuid	string	Yes	—	UUID of the organization that owns the connection
storage_connection_uuid	string	Yes	—	UUID of the CloudConnection to use
bucket	string	Yes	—	Bucket containing the object
key	string	Yes	—	Object key to download
expires_s	integer	No	—	Presigned URL lifetime in seconds; default 3600, max 86400

Output Schema

Field	Type	Required	Default	Description
organization_uuid	string	Yes	—	UUID of the organization that owns the connection
storage_connection_uuid	string	Yes	—	UUID of the CloudConnection to use
bucket	string	Yes	—	Bucket containing the object
key	string	Yes	—	Object key to download
expires_s	integer	No	—	Presigned URL lifetime in seconds; default 3600, max 86400
presigned_url	string	No	—	Short-lived presigned GET URL. Marked sensitive so the engine vaults it before persist; resolve via WorkflowVault / resolve_secret_references.
presigned_url_redacted	boolean	No	—	True when the short-lived URL was issued (plaintext vaulted in state)
expires_at	string	No	—	ISO 8601 UTC timestamp when the presigned URL expires
failure_reason	string	No	—	Engine-stamped human-readable failure reason
failed_at	string	No	—	ISO timestamp when the workflow failed
failed_at_state	string	No	—	Engine-stamped state when the workflow failed
failed_step	string	No	—	Engine-stamped step name (DAG path)
failed_layer	integer	No	—	Engine-stamped layer index (DAG path)
error	string	No	—	Engine-stamped exception message
error_type	string	No	—	Engine-stamped exception class name

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	execute	Issuing presigned GET URL
completed	No	Yes	Yes	—	Presigned URL issued
failed	No	Yes	No	—	Presigned URL issuance failed

State Diagram

Transitions

From	Action	To	Description
pending	execute	completed	—
* (any state)	fail	failed	—

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "storage.download.presigned-url",
  "initial_data": {
    "organization_uuid": "value",
    "storage_connection_uuid": "value",
    "bucket": "value",
    "key": "value"
  }
}