pre-signed URLs vs CloudFront signed URLs

  S3 Pre-signed URLs CloudFront Signed URLs Origin Access Identity (OAI) Origin Access Control (OAC) All S3 buckets and objects by default are private. Only the object owner has permission to access these objects. Pre-signed URLs use the owner’s security credentials to grant others time-limited permission to download or upload objects. When creating a pre-signed URL, you (as the owner) need to provide the following: Your security credentials An S3 bucket name An object key Specify the HTTP method (GET to download the object or PUT to upload an object) Expiration date and time of the URL. You can control user [...]