I investigated the problem a bit furher.

1) mp4 files downloaded to s3 bucket works fine via direct s3 link or via cloudfront for public and private bucket.

2) m3u8 & ts files downloaded to public s3 bucket work fine via direct s3 link in fv player

3) m3u8 & ts files in public s3 bucket don’t work via cloudfront in fv player. It seems in that case s3 doesn’t return Origin header and windows browsers generate CORS errors like “no ‘access-control-allow-origin’ header is present on the requested resource” that are visible via browser’s console. That’s the reason of “hlsjs-lite: network error” in fv player.

4) m3u8 & ts files generated via MediaConvert (no encryption yet) into public s3 bucket do work via cloudfront in fv player

I don’t really understand yet what’s the difference between 3) and 4) options.