How to use Cloudfront signed urls and cookies for restricting access
How to setup a CDN with private S3 bucket