How to Avoid Direct Amazon S3 URLs for HubSpot CTA Redirects?

Developer Support CMS Development
1

Hi there,

The Security Scorecard tool has flagged a concern on our website (upply.com). One of the Call-To-Actions (CTA) in our navigation bar appears to reference an Amazon S3 URL directly:

This direct reference to Amazon S3 negatively impacts our global security score. As a best practice, it’s generally recommended to route such assets through a branded subdomain rather than exposing the raw S3 URL (e.g., hubspot-cta-redirect-eu1-prod.s3.amazonaws.com).

Flaval_0-1747813895539.jpg
Flaval_0-1747813895539.jpg2386×858 214 KB

Our questions are:

  1. Is there a way to configure HubSpot to use a custom/branded subdomain or CNAME for these CTA redirect links instead of the default Amazon S3 URL?
  2. If not directly configurable via HubSpot, would this require intervention from our infrastructure/DevOps team, or is there a recommended workaround?

Flaval_1-1747813925950.jpg
Flaval_1-1747813925950.jpg1146×582 72.3 KB

This issue was last observed on May 19, 2025, and is still open. We’ve reached out to HubSpot CSMs, but they haven’t been able to provide a definitive answer.

Any insights or recommendations would be greatly appreciated!

2

Hey @Flaval at the momenr there’s no way to customise the redirect URLs used by CTAs as they’re a part of the HubSpot infrastructure and not managed user side.

Could you use the browser based tracking instead of the redirect based tracking instead?

TomM2_0-1747821593076.png
TomM2_0-1747821593076.png2114×1124 133 KB

3

Hi @TomM2 - Is there a workaround for this if you still use the legacy CTA editor? We’re experiencing the same issue on our end, but all of our CTAs are in the legacy editor because they’re customized with our own font, something the new editor doesn’t allow us to do.

4

Hey there @ABäckström, and thank you for posting your question!

As @TomM2 says, CTA redirect URLs are part of HubSpot’s infrastructure and can’t be customized.

As for workarounds, there is this Idea post discussing CTA URL behavior, where a user shares a manual code workaround:
https://community.hubspot.com/t5/HubSpot-Ideas/Allow-dynamic-parameters-in-CTA-URL/idi-p/39523

My recommendation is to create a new Idea post focused on your specific use case for the product team to take note.

Finally, I want to tag a couple of community members to share more insights. Hey there @RubenBurdin and @GRajput, I hope you’re having a great week! Any additional thoughts?

Thanks!

Victor

5

Hey @TomM2, thanks for the answer! We tried to find without success where is located this screen you have exactly?

6

Within the new CTA editor it should be under the “options” tab