mediumNewFlipkartSwiggyAtlassian

Our S3 media is leaking through direct bucket URLs. How do you lock the origin to CloudFront without breaking playback?

Origin access control pins the bucket to your distribution, and signed URLs or cookies decide who plays what. Get the expiry wrong and the leak comes back with a signature on it.

Updated Sep 2026 · Grounded in researched DevOps, SRE and platform engineering interview loops, written to a senior-engineer editorial bar, and never padded to hit a word count.

Origin access control pins the bucket to your distribution, and signed URLs or cookies decide who plays what. Get the expiry wrong and the leak comes back with a signature on it.

20 answers per topic instead of 10, and your progress kept · no cardor unlock all 390 remaining answers · ₹2,000 / $25

UP NEXT ON YOUR JOURNEY

Next in this trackSQS, Kinesis or EventBridge: how do you choose the backbone for a new event-driven integration?Next in this trackSix services participate in an order flow. When do you orchestrate with Step Functions and when do you let events choreograph?Next in this trackEvery Lambda invocation opens its own Postgres connection and the database chokes past a few hundred concurrent executions. What fixes it?

DISCUSSION · 0

Nothing here yet. Say how you would answer it.