Networking & Content Delivery
Category: Amazon Simple Storage Service (S3)
Using Amazon CloudFront and Amazon S3 to build multi-Region active-active geo proximity applications
In today’s digital-first business environment with a globally distributed customer base, it becomes important to adopt an architecture that helps customers deliver digital assets to end-users with the lowest possible latency based on the geo-proximity of assets to the end user. Companies with digital assets stored in Amazon Simple Storage Service (Amazon S3) commonly configure the traffic to be […]
Signed cookie-based authentication with Amazon CloudFront and AWS Lambda@Edge: Part 2 – Authorization
In this two-part blog series, you will learn how to use email addresses and domain names for user authentication. With this method, you restrict credentials-free user access to a static website. In this second part of the blog series, you will learn how to implement the authorization mechanism. In the previous blog post, you learnt […]
Signed cookie-based authentication with Amazon CloudFront and AWS Lambda@Edge: Part 1 -Authentication
In this two-part blog series, you will learn how to use email addresses and domain names for user authentication. With this method, you restrict credentials-free user access to a static website. In this first blog, you will learn how to implement the authentication mechanism. In the second blog post, you will learn how to implement […]
Secure hybrid access to Amazon S3 using AWS PrivateLink
AWS PrivateLink for Amazon S3 enables on-premises applications to privately and securely access Amazon S3 over AWS Direct Connect private virtual interface or AWS Site to Site VPN. The Interface VPC Endpoints for Amazon S3 allow security administrators to control which users can access which data in S3 from on premises and cross-Region using their […]
Secure and Cost-Effective Video Streaming using CloudFront signed URLs
Learn how to solve for a common challenge you may face when streaming video on demand (VOD) – limiting access to media streams for select and/or paying users.
Serving SSE-KMS encrypted content from S3 using CloudFront
Update: We’ve updated this blog and the AWS Lambda function code to work with both “custom” and “s3” style origins in Amazon CloudFront. Previously, only “custom” types were covered. In August 2022, CloudFront launched OAC (Origin Access Control), providing native support for customers to use CloudFront to access S3 bucket encrypted with SSE-KMS. Depending on […]





