I modified my templates to use a signed URL from cloudfront. Serving signed URLs from CloudFront offers a robust solution for securely delivering private content while enhancing performance. By embedding expiration times, IP restrictions, and custom policies directly into the URL, you can tightly control access and ensure that only authorised users view your content. At the same time, leveraging CloudFront’s global CDN means that content is cached at edge locations, reducing latency and speeding up delivery — protecting your origin resources from direct access and heavy load. This approach not only boosts security but also provides the flexibility and scalability needed for modern, forward-thinking applications.