And welcome back.
Now in today's video, we'll be discussing about deep cloud friend sanctuaries.
Now, this is one of the great features which cloud offers.
So let's look into our typical use case where we can go ahead and understand why this feature proves
to be useful.
Now, when you typically look into a generic approach where you have a user and you have a cloud distribution
and you have origin, so user requests for an object to the cloud and distribution, this CD in in does
will proxy the request and for order to the origin, it can be easy to instances, etc. And then whatever
response that the seed receives, it forwards it back to the user.
So this is one common thing that we have available.
However, let's assume that these contents within the S3 bucket are private and only the users who pay
for it should be able to perform this.
Get a request.
So how will you be inside kind of us in that you.
So in order to work it out, what you can do is you can only allow some special users at the cloud travel
distribution.
So when a user request for a get operation on the object in the cloud frenzied in will go ahead and
reject it if it is not a special unit.
So if you look into the screen, there is a rule which is configured which states that only special
units will be allowed.
So the concept here is that with this special URI user will be able to fetch these bid objects from
a private S3 bucket.
So a normal user, when he tries to do that without special URI, his request will be rejected.
And only the user who have it or who have bid that user will get that special you added maybe within
the application or in the image through which he can download the objects.
So that special URL that we were discussing is therefore as these signed users in cloud frame.
So in order to make it work, you have a user.
So user will think of fetch operation on the object e and that operation will be sent.
We are this same do you order?
So let's assume that this is a saying you added.
So the cloud tray since it has a rule that only same you audience will be allowed, it will verify whether
you are really sane.
Once verified, then it will go ahead and perform the fetch operation as usual as we had seen in the
first slide.
So just a device again cloud print saying do around mandates users to provide a sign your ID or sign
cookie to access the private content.
So this same duty can be generated by the trusted sign the within your ID of this icon.
So coming back to the global consulate today, I have two clients which are available and one client
does not have same year alone.
One client has signed up alone.
So let me quickly show you the A3 bucket as well.
So there are two S3 buckets of a jet available.
The first bucket would use it.
It has certain files like admin dirty, the index attachment as well as regular, not being so alone
with certain video fines.
Now you have one more bucket list temp clean bucket.
It also have files like index dirty steam and regular dirty and admin dirty actually.
So these three face based have been highlighted are common across what the S3 bucket.
So are you know there is one CBA available and this CBA is referencing to the first S3 bucket contest
demo clean bucket.
And you have the second seed in which is available here.
And this second clean is associated with the temp CD and bucket.
So the second CD.
Let's open up the.
So then we open of the United.
You see that we are seeing the contents of the index, that it's the MLP which is welcome to their demo
page.
So essentially the second CDM does not have this specific rule that only the same URLs will be allowed.
So this rule is not there in the second screen.
However, in the first clean that the rule is praising.
So let's press enter and currently you see you immediately coordinate it.
So I quickly maximized this and the error states that there is a missing key.
So a missing key bid, IED, greater perimeter or cookie value is missing from this, you added.
So this is very similar that since we have requested a private container without sending a signed you
read the request is rejected.
I get cloud from distribution limit.
So now let's do one thing.
Let's quickly go ahead and generate assigned.
You know, within this seal, I have a command.
If it generates a signed, you ought to know within this command.
If you look into the united parameter, we have to specify the entire you added, which is the cloud
distribution as well as the file that we want to request.
So in this case, the file is called as the aggregate DHT.
So just to quickly shoot, even if you open up the aggregate DHT, you get the same, etc..
So we want a user should be able to open up this admin data.
So in order for user to be able to do that, the administrator will have to provide him the same numeral.
And that is exactly what we are doing.
Now, in order to generate same duties, you will need a special key bit, which basically has the keep
it IED as well as the private E file away.
So this would be handed over to the administrator and that administrator will have the rights to perform
these same dual creation operation.
Now, you'll also have to specify the date less there.
You can go ahead and set the expiry audio.
So that's the high level overview since we're only having a demo right now.
So as soon as it press enter, you will see that A you all got created for you.
So this is the sign you added, which you can go ahead and set it with the use it will have made the
parties.
So now when you go ahead and add it to the you are Albert immediately you see the contents of the admin
not be defined.
So for our demo we had taken a simple the fi hub of a lot of organizations.
They used and B3 files to a primarily because a lot of users they put is the military songs and why
is that Bush is is we make the application can go ahead and give this sign you are it back to the user
through which he can go ahead and download the MP three songs at his end.
Great.
So at a high level, would you?
I hope you understood where the sign you are in will prove to be very useful.
So that's the overview about today's video.
I hope this video has been informative for you and I look forward to see you in the next video.