CloudFront routes S3 signed requests for extra free egress
The author explains a technique for routing Amazon S3 signed requests through an Amazon CloudFront distribution to take advantage of CloudFront's larger free egress allowance. By preserving the S3 signature while changing the request domain to CloudFront, users can bypass S3's lower monthly free tier without compromising bucket security. However, the method introduces additional request charges and requires clients to manually rewrite their URLs. Open article →