How to safely allow downloading files from AWS CDN

tienngo — Tue, 06 Oct 2020 09:16:27 GMT

Hello communities,

I am having problem and need to have your advice.

Currently, downloading files is not allowed in our network. However, there is a business requirement to allow download some report files (pdf, exel, word...) from a website which is hosted on AWS. There is not hard to controll website accessing using websites' FQDN but when the users click on download button, they are redirected to AWS CDN network and since the AWS CDN' IP is changed randomly among their AWS IP range so we cannot safely allow user to download the authorized files only. In another word, if I allow users to download from whole AWS IP range it also means that users are able to download files from every websites hosted on AWS. It does not comply our policy. Is there anyway to allow user download from the weblink?

For example, allow user download from weblink: https://example.com/tennant/reports/system/daily_cheklist

I am looking forward to have the expert's advice here.

Thank you.

Re: How to safely allow downloading files from AWS CDN

aaobuhov — Tue, 06 Oct 2020 13:56:35 GMT

I have a same problem with allow downoloading zoom client.

It downloading from random address, resolved as "something".cloudfront.net.

Not from ip-range from document:

https://support.zoom.us/hc/en-us/articles/201362683-Network-Firewall-or-Proxy-Server-Settings-for-Zoom

I also want to know the opinion of experts

topic Re: How to safely allow downloading files from AWS CDN in General Topics

How to safely allow downloading files from AWS CDN

Re: How to safely allow downloading files from AWS CDN