I want to use Amazon S3/CloudFront to store flash files. These files must be private as they will be accessed by members. This will be done by storing each file with a link to Amazon using a mysql database. My problem is this… A high level member who has access to lots of flash files and content can simply find out the URL and then browse to it using the address bar, and share this with other members. As they are both using the http protocol, does this mean I can’t prevent this?
I thought about htaccess but as its Amazon’s own server I’m not sure. I looked at the Access Control documentation but it was a bit unclear.
Also while im here does anyone know a working method for stopping the flash media from showing up in the firefox Tools > Page Info > Media? I saw a post on here about a dummy loader but they don’t work as pointed out because you can just download and change the file extension. There are sites out there that do it but I wan’t to avoid expensive software licences etc.
Sorry thats so lengthy 🙂
Big thanks!
You can maintain ACL at your end and make every file on S3 private. Check if a particular member has access to some file, if yes then generate the signed URL for that particular file(you can set the expiry time of the link) at application end and give to user.