Refactor S3 client initialization to streamline configuration and add public read policy setup; improve error handling for bucket policy application

app/internal/svc/servicecontext.go

@@ -49,12 +49,7 @@ func initDatabase(dbConfig config.DatabaseConfig) *sql.DB {
 }
 
 func initS3Client(s3Config config.S3Config) *s3.Client {
-	var cfg aws.Config
+	cfg, err := awsconfig.LoadDefaultConfig(context.Background(),
-	var err error
-
-	if s3Config.Endpoint != "" {
-		// Custom endpoint (e.g., MinIO)
-		cfg, err = awsconfig.LoadDefaultConfig(context.Background(),
 		awsconfig.WithRegion(s3Config.Region),
 		awsconfig.WithCredentialsProvider(credentials.NewStaticCredentialsProvider(
 			s3Config.AccessKeyID,
@@ -65,24 +60,38 @@ func initS3Client(s3Config config.S3Config) *s3.Client {
 	if err != nil {
 		panic(err)
 	}
-		return s3.NewFromConfig(cfg, func(o *s3.Options) {
+
+	client := s3.NewFromConfig(cfg, func(o *s3.Options) {
 		o.BaseEndpoint = aws.String(s3Config.Endpoint)
 		o.UsePathStyle = true
 	})
-	}
 
-	// Standard AWS S3
+	// Set bucket policy for public read access
-	cfg, err = awsconfig.LoadDefaultConfig(context.Background(),
+	setBucketPublicReadPolicy(client, s3Config.Bucket)
-		awsconfig.WithRegion(s3Config.Region),
-		awsconfig.WithCredentialsProvider(credentials.NewStaticCredentialsProvider(
-			s3Config.AccessKeyID,
-			s3Config.SecretAccessKey,
-			"",
-		)),
-	)
-	if err != nil {
-		panic(err)
-	}
 
-	return s3.NewFromConfig(cfg)
+	return client
+}
+
+func setBucketPublicReadPolicy(client *s3.Client, bucket string) {
+	policy := `{
+		"Version": "2012-10-17",
+		"Statement": [
+			{
+				"Effect": "Allow",
+				"Principal": "*",
+				"Action": "s3:GetObject",
+				"Resource": "arn:aws:s3:::` + bucket + `/*"
+			}
+		]
+	}`
+
+	_, err := client.PutBucketPolicy(context.Background(), &s3.PutBucketPolicyInput{
+		Bucket: aws.String(bucket),
+		Policy: aws.String(policy),
+	})
+	if err != nil {
+		// Log error but don't panic - bucket might already have the policy
+		// or the user might not have permission to set policies
+		println("Warning: Failed to set bucket policy:", err.Error())
+	}
 }