How to use AWS Elemental MediaPackage with Custom CDN

AWS Elemental MediaPackage is a public endpoint as it's designed to be a public origin. A custom CDN can pull from MediaPackage as origin as long as the CDN can reach it and have the origin hostname in CDN config. You can then utilize MediaPackage IP Access Control Lists (ACLs) to limit access to CDN IPs or use a secret header to authenticate CDN requests. Access to MediaPackage over Direct Connect would be via a Public Virtual Interface.