I have set up some S3 videos and I believe they are correctly in a private bucket as they are not accessible via their Amazon URL. They are accessible by members only on my site using Amember as they should be, however a "view source" shows the video url in flowplayer (my site URL not Amazon) that if pasted into a browser does not require any authentication and would allow download of the videos by anyone with that URL. Am I missing something? Dave
This protection work this way: on each authenticated user access aMember check his permission and in case permission is ok then generate unique access link to amazon file for this user that expire within several minutes. This link will expire within several minutes and it is not possible to use it again.