Video on Demand on AWS
Video on Demand on AWS


When you build systems on AWS infrastructure, security responsibilities are shared between you and AWS. This shared model can reduce your operational burden as AWS operates, manages, and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the services operate. For more information about security on AWS, visit the AWS Security Center.

Amazon S3 Bucket Policy

The Amazon Simple Storage Service (Amazon S3) buckets for your source video and MP4 output are configured with default access policies. To access these buckets, users must have AWS Identity and Access Management (IAM) roles with admin privileges. The S3 bucket for HLS output includes a policy that allows access from Amazon CloudFront. Because the Amazon CloudFront endpoints are publicly accessible, the HLS output bucket is also publicly accessible. For information on how to secure Amazon CloudFront, see Serving Private Content through CloudFront in the Amazon CloudFront Developer Guide.

On this page: