AWS Cloudfront - Private Content support for our C++ App

Our application is a realtime 3D visualisation and planning tool written in C++. It loads 3D content (meshes, textures, materials) on the fly from both local storage (eg. Hard Drive, Network drive) and HTTP. Currently the HTTP method has no security/authorisation considerations - eg. data on web server must be publicly accessible. We want to modify our HTTP loader to load secure content served from AWS Cloudfront, using Signed URLs or Signed Cookies, such as those described here: [login to view URL] This will enable us to store our data on S3 without the need for it to be publicly accessible. Your task is to: - Recommend and document a method of managing access to private content through cloudfront based on your prior cloudfront experience and our application requirements - This should ensure our content is not publicly accessible through any other means. - Advise if we should be using signed URL’s or signed Cookies or another approach entirely. - Design a solution for us to discuss and approve development of. - Implement and test the solution, meeting performance requirements. - Deliver the solution and assist with any implementation questions. Experience / Skill requirements - You will have prior experience developing applications that interact with cloudfront. - You will already have a clear understanding of serving content privately through cloudfront and the advantages / disadvantages of each approach - You will be able to demonstrate prior code/application examples with similar function - Strong C++ experience Other Notes - Our system loads thousands of small files in a multithreaded manner. Your solution must match the performance of our existing HTTP loader. - You will be provided a sample application utilising our HTTP loader with a list of files to download. You will use this as a base and integrate your solution following our existing framework. - You will commit your code to a bitbucket repository provided by us.