Utitily service based on AWS CloudFront SDK to create signed CloudFront URLs with both canned and custom policies. CloudFront is AWS Content Delivery Network and has a setting to restrict requests to only signed URLs and Cookies, thus making it possible to serve private content (e.g. from an S3 Bucket) securely at scale.