With a custom access policy, it would be pretty easy to specify the IP address allowed for a specific signed URL[0]. This would help to mitigate the risk factor

With a custom access policy, it would be pretty easy to specify the IP address allowed for a specific signed URL[0]. This would help to mitigate the risk factor mentioned in point 5 above. [0] http://improve.dk/how-to-set-up-and-serve-private-content-using-s3/ http://improve.dk/how-to-set-up-and-serve-private-content-us...