AWS MediaTailor SSAI Security in Multi-CDN Environments: Token Authentication, Origin Security, and Handling Third-Party CDN Limitations – Part 2 | Amazon Web Services

The AWS MediaTailor multi-CDN security guide explains how to pass CDN-specific auth tokens through to segment requests.

Enabling manifest query-parameter pass-through for segment URLs requires AWS Support to turn on the feature.

MediaPackage origins should be locked down with CloudFront OAC, while third-party CDN limitations are handled through CloudFront.

These patterns help keep HLS/DASH adaptive streaming secure during CDN switching without exposing origin URLs or breaking authentication.