- Viewerweb app on CloudFront
- Cognito Hosted UIPKCE authorization code
- Auth LambdaHMAC-signed state, JWT verify
- Signed cookiesHttpOnly, Secure, 4-hour policy
- CloudFrontkey group checks every request
- Private S3.m3u8 + .ts segments
Video platform on AWS, Aug 2026 – Sep 2026
StreamVault
Invite-only HLS video streaming on AWS with edge-enforced access control.
End-to-end video platform: an EC2 FFmpeg pipeline produces multi-audio HLS, Cognito with PKCE signs viewers in, a Lambda issues CloudFront signed cookies, and a FastAPI + DynamoDB service syncs watch progress. Infrastructure is defined in AWS CDK.
- AWS CDK
- CloudFront signed cookies
- S3
- Cognito (PKCE)
- Lambda
- API Gateway



