Laravel 5 and S3 access control

I’m creating an application with Laravel 5 where the user can upload content. I would like to store the content on AWS S3.

The user can categorize each piece of content:

Public: anybody can view.

Private: Only the authenticated user can view.

Friends: Only established friend relationships within the application can view.

I can create this level of access control within the application layer.

How can I integrate this level of access within AWS S3?

For example, if I create an S3 bucket, and allow the user to upload content objects to this bucket with the ‘friends’ designation, how can I ensure that only friends of the user can access the objects?

I have read through the documentation on AWS S3, Cloudfront, Cognito, IAM, and PHP SDK, but it is still unclear on how to put it all together to fulfill my requirement.

via Chebli Mohamed