There are a variety of access control options available if you want to deliver content only to selected customers, allow access to content only until a certain time, or allow only certain IP addresses to access content. For example, if your site is under development then you can make CloudFront accessible only from your internal IP addresses.
There are two options for controlling access controls to private content:
- Signed URLs: Adds the signature to the query string in the URL. Hence, your URL changes. This option is typically used when you want to restrict access to individual files and/or the users are using a client that doesn't support cookies.
- Signed cookies: Adds the signature to a cookie. Hence, ...
