This blog shows how signed URLs are helpful in terms of security and the use of AWS CloudFront SDK to access your s3 objects as signed URLs using canned policy. Further steps would include making documents more secured using presigned URLs and custom policies for signed URLs.