How to create private URL on S3/CloudFront with time-limit ?

For security reason, many companies may require one time temporary or private URL with time-limit. Some people call this as private or signed URL. Below URL is based on PHP and contains S3 signed URL generation function and CloudFront signed URL generation function. The implementation method both S3 and CloudFront is totally different.

 $awsAccessKey,
    'secret' => $awsSecretKey,
]);
$cloudFrontClient = new CloudFrontClient([
    'version'     => '2019-03-26',
    'region'      => 'us-east-1', // Change this to your desired AWS region
    'credentials' => $credentials,
]);
// Replace 'your/private/key.pem' with the path to your private key file
$privateKeyPath = 'your/private/key.pem';
// The CloudFront URL you want to grant one-time access to
$resourceUrl = 'https://your-cloudfront-url/your/resource.jpg';
// Generate a one-time CloudFront URL
$signedUrl = $cloudFrontClient->getSignedUrl([
    'url'         => $resourceUrl,
    'expires'     => time() + 3600, // URL expiration time (in seconds)
    'private_key' => $privateKeyPath,
]);
echo "One-time CloudFront URL: " . $signedUrl;

Make sure to replace 'YOUR_AWS_ACCESS_KEY', 'YOUR_AWS_SECRET_KEY', 'YOUR_CLOUDFRONT_DISTRIBUTION_ID', 'your/private/key.pem', and 'https://your-cloudfront-url/your/resource.jpg' with your actual AWS credentials, CloudFront distribution ID, private key path, and the CloudFront resource URL you want to grant one-time access to.

This example assumes you have a private key file ('your/private/key.pem') associated with your CloudFront key pair.

Additionally, make sure to handle and store your AWS credentials securely, and do not hardcode them directly in your code for production applications.