How to Serve Private Assets - Proxy, presigned URL, CloudFront, WAF
How do you get files that must not be public into the browser? A server proxy, presigned URLs, CloudFront signed URLs, and OAC with WAF, compared along one axis: who checks access. The belief that a proxy reads the whole file was checked with a 200MB file.