The private bucket market-receipts-139v8pe holds receipt-1042.txt. The customer needs it, for ten minutes at most.

1. Make a link to the receipt that lasts ten minutes, and save just the link to ~/link.txt.

2. Download the receipt through the link with curl, as the customer would, and save it to ~/receipt-1042.txt.

3. Try the receipt's plain address, without the signature, and see what a stranger gets:

   sh

   copy

   curl -s https://market-receipts-139v8pe.s3.us-east-1.amazonaws.com/receipt-1042.txt