适用于视频文件的AWS S3和Cloudfront CDN

Question

I'm just getting started using AWS S3 and Cloudfront service. So far I've created a S3 instance and a Node.js server which streams the files from S3 to the user reaching the server's endpoint.

const params = {
    Bucket: BUCKET_NAME,
    Key: KEY
 };  
const obj = s3.getObject(params);
const stream = obj.createReadStream()
stream.pipe(res); // RES is the result send back to user

From my understanding, you get a CDN for your files, if you spin up a CloudFront distribution so my next step was to add Cloudfront to my S3 bucket.

My next action was to add the endpoint to the S3 instance in the code:

const s3 = new aws.S3({
  endpoint: CLOUDFRONT_URL
})

Now however I get the following error when people reach the endpoint:

UnknownEndpoint: Inaccessible host: BUCKET_NAME.CLOUDFRONT_URL. This service may not be available in the `us-east-1' region.

It seems from the error message, Cloudfront is not available in the US-EAST region which seems weird to me? I'm thinking I just made a mistake configuring it in the code. Any advice?

Edit:

My use case is as follows:

I have an app that allow downloads of video content. These videos are stored on AWS S3. Since people from all over the world are accessing these videos, my idea was to enable Cloudfront on the bucket to make downloads available at servers closer to the user and therefore getting better download speed.

Currently the user ask the endpoint to download a file and the Node.js server streams the video file from S3 to the user.

I might have misunderstood the use case for Cloudfront.

Answer 1

This can be tried by making few changes in the given configuration as below:

Change the piece of code:

const s3 = new aws.S3({
  endpoint: CLOUDFRONT_URL
})  

to

const s3 = new aws.S3({
      "accessKeyId": "Access_Key",
      "secretAccessKey": "Secret_access_key",
      "s3BucketEndpoint": "true",
      "endpoint": "YourS3ENDPoint"
    })

This should help!

Answer 2

Instead of creating a readStream, you could use the SDK to get a presigned URL for download. That way you don't need to pay extra for cloudfront.

Here is an example:

   const Aws = require('aws-sdk');
   const s3 = new Aws.S3();

   Aws.config.update({accessKeyId: 'accessKey created on IAM',
                      secretAccessKey: 'secretKey created on IAM',
                      region: 'default region'
                      });

   const download_url = s3.getSignedUrl('getObject', {
                                        Bucket: 'bucket of file',
                                        Key: 'filename of filepath within the bucket',
                                        Expires: 'case you need to expire the url (value in seconds)'})

console.log(download_url); 

If this solved, let me know :)