How to safely allow downloading files from AWS CDN

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L2 Linker

How to safely allow downloading files from AWS CDN

Hello communities,

 

I am having problem and need to have your advice.

 

Currently, downloading files is not allowed in our network. However, there is a business requirement to allow download some report files (pdf, exel, word...) from a website which is hosted on AWS. There is not hard to controll website accessing using websites' FQDN but when the users click on download button, they are redirected to AWS CDN network and since the AWS CDN' IP is changed randomly among their AWS IP range so we cannot safely allow user to download the authorized files only. In another word, if I allow users to download from whole AWS IP range it also means that users are able to download files from every websites hosted on AWS. It does not comply our policy. Is there anyway to allow user download from the weblink?

 

For example, allow user download from weblink: https://example.com/tennant/reports/system/daily_cheklist

 

I am looking forward to have the expert's advice here.

 

Thank you.

Highlighted
L2 Linker

Hi

 

I have a same problem with allow downoloading zoom client.

It downloading from random address, resolved as "something".cloudfront.net.

Not from ip-range from document:

https://support.zoom.us/hc/en-us/articles/201362683-Network-Firewall-or-Proxy-Server-Settings-for-Zo...

 

I also want to know the opinion of experts

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!