Security Consultant
Can someone differenciate S3 Pre-signed URL vs Cloud Front Signed URL vs Cloud front Signed Cookies?
If ACG can look into this and add some content, it will be much appreciated!
1 Answers
Gaurav Verma
I dont know about Cloud Front Signed URL but the differece between Pre-signed URL and Pre-Signed Cookies are, when you need to restrict only one file you need pre-signed url when you need to restrict multiple files you need pre-signed cookies. For more details please check here https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-choosing-signed-urls-cookies.html
Simpletip: Use CloudFront signed URL when S3 is accessible only to CloudFront using OAI. S3 Pre-signed URL will give user access to S3 bucket without the CloudFront (You don’t host every S3 on CDN)
Cloud Front Signed URL vs Cloud front Signed Cookies : URL is for one unique resource whereas Cookies can be sued for accessing multiple resources. Think of cookie akin a session token (expires), the same session token can be used to access multiple resources till the session is valid.