Prevent download of file from cloudfront

Learn more. How to prevent direct downloading media file from source? Ask Question. Asked 2 years, 4 months ago. Active 8 months ago. Viewed 2k times. Any good advice for this? Thank you. Woojin Jeong Woojin Jeong 1 1 gold badge 2 2 silver badges 9 9 bronze badges. What you are asking for is not possible. From the servers perspective, there is no difference between downloading and viewing. Add a comment. Active Oldest Votes. Anton Anton 2, 2 2 gold badges 10 10 silver badges 22 22 bronze badges.

HLS does not make it more difficult. Ravi Jayagopal Ravi Jayagopal 1, 7 7 silver badges 10 10 bronze badges. Sign up or log in Sign up using Google.

Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Who owns this outage? Building intelligent escalation chains for modern SRE. Podcast Who is building clouds for the independent developer? Featured on Meta. Now live: A fully responsive profile. Reducing the weight of our footer.

Asked 10 years, 7 months ago. Active 8 years, 2 months ago. Viewed 7k times. Community Bot 1 1 1 silver badge. Christian Fazzini Christian Fazzini They might need to be more sophisticated, but it will be possible. Youtube videos for example are protected with expiring tokens etc.

Hmm, so there is no way of not letting the user download the media? You can make it difficult, but you can't make it impossible.

Add a comment. Active Oldest Votes. As Wukerplank suggested: "You can make it difficult, but you can't make it impossible. Oh, they have a timeout etc. If you put cloudfront in the middle and restrict access only through that, you can protect the files.

Please correct me if I'm wrong, hehe. The timeout only keeps it accessible via the url for a limited time. Which is good to prevent hotlinking. Cloudfront still points to an origin. So the files are, in practice, still downloadable — Christian Fazzini. Rudolf Boogerman Rudolf Boogerman 21 2 2 bronze badges.

Sign up or log in Sign up using Google. Sign up using Facebook. Sign up using Email and Password. Post as a guest Name. Email Required, but never shown. The Overflow Blog. Who owns this outage? Building intelligent escalation chains for modern SRE.