How to restrict access to S3 assets (via CloudFront) based on asset meta data that is stored in a third party application?
0
One of my customers wants to restrict access to S3 bucket via Cloudfront. I assume Origin Access Identity (OAI) can be used here. But the access is conditional (i.e based on some asset meta data in third party application). What is the best way to achieve this ? Add some sort of custom header in CloudFront call after looking up that external asset and then use that header in Policy Statement ?
Langue
English
demandé il y a 4 ans330 vues
1 réponse
- Le plus récent
- Le plus de votes
- La plupart des commentaires
0
Use OAI to restrict access to the distribution solely to CloudFront, and then use Lambda@Edge (origin request event) to apply access control on application level.
Contenus pertinents
- demandé il y a 6 mois
- demandé il y a un an
- Réponse acceptéedemandé il y a 7 mois
AWS OFFICIELA mis à jour il y a 2 ans- AWS OFFICIELA mis à jour il y a 2 ans
- AWS OFFICIELA mis à jour il y a 2 ans
