OS recommendation

Hello Daniel,

1) I see, you mean https://d15mkutvqd9ewt.cloudfront.net I solved that by removing “Everyone” from the bucket permissions. As long as the Bucket Policy has this in it it works:

{
    "Version": "2008-10-17",
    "Id": "PolicyForCloudFrontPrivateContent",
    "Statement": [
        {
            "Sid": "1",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity {id}"
            },
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::{bucket name here}/*"
        }
    ]
}

That policy is created by CloudFlare when setting the read permissions for the bucket.

I’ll ask Eduard to add that into our documentationt.

Thanks,
Martin

Hello Daniel,

if you create the CloudFront distribution for the bucket with HLS videos it will have all the required permissions for the bucket and you will be able to remove the permissions to list the bucket listing like I did.

If you followed our guide and you already have CloudFront in place, then you can just remove the bucket read permission for “Everyone”.

If you don’t have CloudFront, then it might require some more steps to make sure any new HLS videos are still playable without requiring you to set permissions to “Everyone” to “Read” for these new HLS videos.

Thanks,
Martin

Hello Daniel,

my suggestion would be to do it like in step 2. here: https://foliovision.com/player/video-hosting/serving-private-cloudfront#cloudfront -> “Grant Read Permission on Bucket”

Thanks,
Martin