AWS CloudFront is a content delivery network (CDN) that can be used to deliver content, such as web pages, images, and videos, to users around the world.
To restrict access to the contents delivered in AWS CloudFront, you can use methods such as access control lists (ACLs), origin access identity (OAI), query string parameters, signed URLs, and signed cookies.
These methods allow you to grant or deny access to specific Amazon S3 bucket or object key prefixes, restrict access to your origin to CloudFront only, grant access to specific versions of an object and grant temporary access to your content with expiration time and specific IP addresses or HTTP referrers.