Just went back and re-read through your guide on HLS and AWS WAF and I think this should be sufficient for the time being. Still wouldn’t mind seeing signed cookies, though.

Thanks for making a good product and good documentation to go with it :)