title: Amazon CloudFront - protect video with Signed URL
body: <p><strong>BACKGROUND:</strong></p>
  
  <p>Amazon Cloudfront video delivery with S3 storage: I am using a custom 360-degree video player. The player simply links to MP4 videos. The videos are not streamed but just a direct link with progressive download.</p>
  
  <p><strong>ISSUE TO SOLVE ---> Signed URL</strong></p>
  
  <p>1) The videos should ONLY play back from my website and not from other websites. Otherwise someone will just hotlink to the videofiles, and I will have to pay for the Amazon traffic.</p>
  
  <p>2) Where and how to insert CloudFront "Signed URL" policies?? Most tips suggest to use "Signed URL" that is connected to CloudFront. But I cannot put the puzzles together, too confusing as I am only a semi-advanced self-taught guy. So..:</p>
  
  <p>2A --> where to insert the CloudFront policy? On S3 console?Or where?</p>
  
  <p>2B --> what exactly to write, pls. provide a working example!</p>
  
  <p>2C --> how to include one specific domain</p>
  
  <p>3)I also suspect that protecting the file permissions in a S3 bucket is not enough, CloudFront may ignore that permission rule. Is that correct?</p>
  
  <p><strong>GUIDANCE:</strong></p>
  
  <p>If nothing works, I am looking for a paid, 1-hour Skype guidence session where we set up 1 video together with CloudFront Signed URL, using screensharing. All with step-by-step explanation, so I can repeat the process for the other videos myself. And the Skype session is affordable for a budget sensitive Kickstarter / Indiegogo project. </p>
  
  <p>I appreciate any help, really do! Thanks!</p>