By using AWS re:Post, you agree to the Terms of Use

Restricting access to video content using cloudfront

0

we host exclusive content on our platform. only specific users that meet certain criteria are intended to have access to the content. we authenticate the users.

we would like to know how we can ensure that authenticated users are unable to share the link generated to give them access to the content stored in s3 bucket. any suggestions or documentation we can study on how to prevent users from sharing the link?

1 Answers
0

Hi,

I believe you want to ensure that authenticated users are unable to share the link generated to give them access to the content stored in your S3 bucket. I would advise to restrict access to content that you serve from Amazon S3 bucket, users will only be able to access your files through CloudFront, not directly from the S3 bucket.

You will need to Create a special CloudFront user called an origin access identity (OAI) and associate it with your distribution. Configure your S3 bucket permissions so that CloudFront can use the OAI to access the files in your bucket and serve them to your users. Make sure that users can’t use a direct URL to the S3 bucket to access a file there. In addition, I have provided a documentation with guided steps to restricting access to Amazon S3 [1].

Refer for References

[1] https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html

answered 2 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions