DriversRecommendedOutdated drivers can make a good PC feel brokenScan driver issues before chasing fixes manually.Scan NowOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
World desk7 min

How to Configure CloudFront for Video Delivery

CloudFront serves packaged video rather than encoding it. Learn how to configure origins, cache behaviors, HTTPS, and access controls for VOD and live workflows.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To deliver video with CloudFront, package it first as HLS, DASH, CMAF, or Smooth Streaming; store VOD files in S3 or use an HTTP origin; then configure a CloudFront distribution with cache behaviors that match the manifest and segment paths. CloudFront distributes packaged video over HTTP—it does not encode a raw video into streaming renditions. The Amazon CloudFront Developer Guide states: “You must use an encoder to package video content before CloudFront can distribute the content.” AWS’s on-demand video guide explains the VOD workflow, while its live streaming guide covers a MediaPackage-based live workflow.

Choose the workflow and prepare the video

Start by deciding whether viewers will watch stored video on demand (VOD) or a live feed. The origin and cache settings differ because stored assets are relatively stable, while live manifests and segments are updated as the stream progresses.

As an Amazon Associate I earn from qualifying purchases.

Workflow Typical preparation and origin CloudFront’s role
VOD An encoder or packager produces the streaming files. Store them in S3 or serve them from another HTTP origin. Delivers manifests and segments from the origin and caches objects where permitted.
Live An encoder such as AWS Elemental MediaLive feeds a live media origin such as AWS Elemental MediaPackage or MediaStore. Routes viewer requests to the appropriate live endpoints and caches according to the live workflow’s requirements.

AWS lists HLS, MPEG-DASH, Smooth Streaming, and CMAF as packaging formats. Pick formats supported by your target players, and ensure the packaging output, origin paths, and CloudFront behaviors agree. For VOD, AWS names MediaConvert as an encoder example; for live, its documented architecture uses an encoder and a live media origin. See the CloudFront VOD guidance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Configure CloudFront for VOD from S3

  1. Encode and package the source. Use an encoder/packager to create the rendition set, manifests, and media segments required by your player. Upload the packaged output—not just the original source file—to the origin.
  2. Put the files in an origin. For an S3 workflow, organize the packaged files under the object paths your player will request. CloudFront also supports an HTTP origin. AWS defines the origin as the resource from which the distribution obtains objects; see origins for CloudFront distributions.
  3. Protect a private S3 origin. If the bucket should not be directly readable by viewers, configure CloudFront origin access control (OAC) and the corresponding bucket permissions so requests go through the distribution rather than bypassing it. Follow the current AWS instructions for restricting access to an S3 origin.
  4. Create a distribution and add the origin. In the CloudFront console, create a distribution and select the S3 bucket or HTTP server that contains the packaged assets. Use the origin domain and path that match where the files are stored.
  5. Set cache behaviors for the request paths. Configure behaviors for the path patterns your player uses. A simple VOD presentation may use one behavior if manifests and segments have the same requirements; use separate behaviors when they need different cache, forwarding, or access settings. Set the cache policy to suit how often the objects change and whether query strings form part of the cache key.
  6. Use HTTPS for viewers. Configure the distribution for HTTPS. If using a custom domain, attach the appropriate certificate; AWS’s S3 and CloudFront tutorial describes using AWS Certificate Manager (ACM) with a custom domain.
  7. Point the player at CloudFront. Use the CloudFront object URL (or your configured custom domain) for the manifest URL in the player. When an object is available at an edge cache, CloudFront can serve it there; otherwise it retrieves it from the origin. This is an architectural behavior, not a guaranteed latency measurement.

Set cache keys and forwarding deliberately

A cache key distinguishes one cached object from another. CloudFront cache policies select which request values—such as query strings—participate in that key; origin request settings control which values are forwarded to the origin. These settings affect cache sharing as well as origin requests. Review AWS’s cache key guidance and origin request guidance when deciding which values are needed.

#1 Best Overall
ZowieBox, 4K HDMI NDI Video Encoder/Decoder, HDMI NDI
  • Compact but Powerful Design: ZowieBox is smaller than a phone, featuring a tally light and LCD screen for streaming status. Capture console gameplay in up to 4K with zero-lag HDMI passthrough, while the built-in video encoder converts video for IP streaming. The IP stream can also be decoded back to a 4K HDMI signal.
  • Standalone Game Streaming: Just plug and play—ZowieBox enables PC-free live gaming without affecting gameplay. As an RTMP hardware encoder and HDMI streamer, it delivers stable streaming directly from your source, making it ideal for gaming, live events, and professional broadcasting.
  • NDI|HX3 Converter Technology: ZowieBox converts HDMI signals to NDI|HX3/HX2/HX, functioning as an NDI video encoder, or NDI Video Decoder for flexible IP workflows. Certified NDI technology enables low-latency gameplay streaming through OBS/vMix. Note: Encoder and decoder modes cannot run simultaneously; full NDI signals are not supported.
  • UVC to HDMI Conversion: Supporting up to 4K@30fps and 1080p@60fps decoding, ZowieBox enables flexible conversion for webcam and video workflows. As a video decoder and HDMI to IP converter, it expands connectivity options for professional video devices. Note: USB capture card functionality is not currently supported.
  • All-around Configuration Options: Control ZowieBox through its web UI on a PC, phone, or tablet. Manage connected PTZ cameras, tally light, video/audio, OSD, work mode, streams, network, and system settings. Support for VISCA over IP encoder workflows enables flexible PTZ control, while the dashboard provides video preview and system status.
  • Include a query string, header, or cookie only when the player or origin uses it to select content or control delivery.
  • Avoid forwarding all cookies, headers, or query strings without a specific requirement. Unneeded variation can divide requests into separate cache entries and increase requests to the origin.
  • Set freshness to match the object lifecycle. Long-lived VOD segments that are not replaced can be cached differently from manifests or objects that are updated.
  • Test with the actual player request URLs, including any required query parameters; a behavior that works for a bare manifest URL may not work for a signed or parameterized request.

Configure CloudFront for live video

Live streams need behaviors that match the paths emitted by the live origin. In AWS’s documented MediaPackage workflow, manifests and segments can use separate cache behaviors. The path patterns depend on the format and endpoint; the guide shows HLS patterns using .m3u8 manifests and .ts segments, and DASH patterns using .mpd manifests and .mp4 segments. Do not copy those extensions blindly if your endpoint uses different paths or formats. Follow the AWS MediaPackage live workflow for the endpoint you are deploying.

Settings specific to the documented MediaPackage workflow

  • Redirect viewer HTTP requests to HTTPS.
  • Use a minimum TTL of five seconds or less to help prevent stale live content.
  • Forward only query strings the workflow needs. AWS specifies m for MediaPackage manifest modification time.
  • For LL-HLS manifest behaviors, forward _HLS_msn and _HLS_part so blocking playlist requests can work.
  • Enable header-based MediaPackage CDN authorization between the MediaPackage endpoint and CloudFront, and confirm the current MediaPackage-side configuration in its own documentation before deployment.

These values are guidance for the documented MediaPackage workflow, not universal CloudFront defaults for every live origin. Match behavior paths, TTLs, and forwarded parameters to the live service and protocol you actually use.

Rank #2
osee GoStream Deck HDMI Pro Live Streaming Multi Camera Video Mixer Switcher
  • 【Rich Connection Ports】 The Osee GoStream Deck video switcher comes with 4 HDMI inputs and 2 HDMI outputs, allowing you to connect four different media sources and two displays for MultiView and monitoring. It also includes 2 Type-C ports (input/output) for webcam input/output, SSD connection, and PC connectivity, 1 Ethernet port for live streaming, 2 audio inputs and 1 headphone output for monitoring audio quality or recording, and 1 SD card slot for recording or playing files directly.
  • 【Audio Control, Recording and Playback 】 The Osee GoStream Deck video switcher features various audio control buttons and adjustable knobs. It comes with headphone and microphone input for your live-streaming audio system. Additionally, it provides professional audio effects, including EQ, Limiter, Fader, etc. The GoStream Deck can record your PGM to an SD card or USB SSD while simultaneously playing back MP4 files for intros, breaks, etc.
  • 【3 Streaming & Landscape / Portrait streaming】 This live streaming video switcher can simultaneously stream to 3 platforms like YouTube, Facebook, Zoom, or any RTMP server via the Ethernet port. Alternatively, you can use the USB output to stream through PC software like OBS or vMix. In addition, it supports both landscape and portrait modes to suit your various needs.
  • 【Efficient Control】 The GoStream Deck features a hard control panel with PVW/PGM buses, T-Bar, and Macros - perfect for broadcast-quality streaming in education, conferences, worship, live events, and weddings. With its built-in menu system, you can control your live production without a PC. Additionally, we provide free PC control software and a companion control module for expanded functionality.
  • 【Convenient Graphics Overlay】 This video mixer supports MultiSource functionality with dual video windows, background options, and graphics overlay - ideal for church broadcasts, podcasts, online meetings, panel discussions, and TV-quality live productions. Downstream keyer for logo and lower-third overlays. Upstream keyer supporting green screen, chroma key, PIP (Picture-in-Picture), and pattern effects.

Choose access controls for the content

Public playback, private S3 access, and viewer authorization solve different problems. OAC prevents viewers from fetching protected S3 objects directly; signed URLs or signed cookies control which viewers may request content through CloudFront. AWS recommends considering signed cookies for access to multiple restricted files, such as all the files in an HLS presentation, and signed URLs for an individual file or clients that cannot use cookies.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. For a private S3 origin, configure OAC and bucket permissions as described in the private S3 origin guide.
  2. For viewer restrictions, configure the relevant cache behavior to require signed requests and establish trusted keys/signers before issuing them. See AWS’s private content overview.
  3. Use signed cookies when granting access to a set of related restricted files and the player can send cookies. Use signed URLs when authorization is for an individual file or cookie handling is unavailable. AWS explains both options in its signed URL and signed cookie documentation.

Validate playback and troubleshoot common failures

Test from the viewer-facing CloudFront URL, not only from the origin. Check the manifest response and then inspect the segment requests it references; successful manifest delivery alone does not prove that the full presentation is reachable.

Rank #3
URayCoder HD HEVC H.265 MPEG4 H.264 4K HDMI to Video Streaming IPTV Encoder for HDMI to RTSP RTMP HTTP UDP HLS SRT Facebook YouTube Live Streaming Server
  • 【Innovative Product with Leading Technology】- Equipped with an advanced H.265 /H.264 dual encoding chip, supports 4K UHD (3840x2160) video input and output, with a maximum frame rate of 30fps at 4K resolution and up to 120fps at 2K and lower resolutions, delivering a smooth and detailed visual experience. It also supports HDCP 1.4 decryption, easily decoding various HDMI ultra HD video sources, delivering a cinematic visual experience for both professional live streaming and 4K ultra HD content transmission.
  • 【Multi-protocol and Multi-platform Compatibility】- Fully compatible with streaming protocols such as HTTP, RTSP, RTMP(S), SRT, HLS(M3U8), MP4, Multicast(UDP, RTP, PTL), FLV, WebRTC, TRTC, ICECAST, it can simultaneously output 4 video streams with different protocols and push them to live streaming platforms such as YouTube, Facebook, Twitch, and Vimeo with one click. Simultaneous live streaming across multiple platforms can be achieved without additional equipment.
  • 【Highly Customizable Settings to Meet Individual Needs】- It supports adding static text, scrolling captions, brand logos, and timestamps. Users can freely adjust core parameters such as video resolution, frame rate, and bitrate, and also perform personalized editing functions such as video cropping, rotation, flipping, and mirroring. It supports dual input of HDMI embedded audio and line-in audio, with adjustable sound quality, making your live stream content more distinctive and allowing you to create a unique brand live stream style.
  • 【Stable and Efficient Transmission, Easy Operation】- Employing HDMI to Ethernet core connection technology, it ensures stable and reliable network transmission with low latency and no lag, adapting to various network environments. Equipped with an intuitive user interface and detailed instruction manual, no professional technical background is required; setup can be completed quickly after connecting the device. It is also compatible with multiple terminals such as computers and mobile phones for management, and the video stream status can be viewed in real time via a URL.
  • 【Lifetime Free Warranty and Technical Supports】- All URayCoder video codecs come with a lifetime free warranty and technical supports, supporting secondary development and feature customization to meet enterprise-level personalized needs. Meanwhile, we providing many kinds of customization services such as shell pattern printing, logo addition, hardware and function development, ensuring reliable quality and worry-free after-sales service.
Symptom Likely area to inspect What to check
Manifest returns an error or the player cannot parse it Packaging, manifest path, or behavior routing Confirm the object exists at the origin, the manifest format matches the player, and its CloudFront path pattern selects the intended origin and settings.
Manifest loads but segments fail Segment paths, permissions, or behavior selection Inspect the exact segment URLs in the manifest. Verify their objects exist, their behavior matches the path, and S3 or origin permissions allow CloudFront to retrieve them.
Live playback falls behind or shows stale content Live cache settings and request parameters For the documented MediaPackage workflow, verify the short minimum TTL guidance and required manifest query forwarding. For other origins, use that origin’s requirements instead.
LL-HLS playlist requests stall Manifest behavior query forwarding For the MediaPackage LL-HLS workflow, check that _HLS_msn and _HLS_part are forwarded as required.
Private objects work at the origin but fail through CloudFront OAC or viewer authorization Check S3 bucket permissions and OAC association; if the behavior requires signed requests, verify that the viewer’s URL or cookies are valid and that trusted keys/signers are configured.
CloudFront returns the wrong cached variant Cache policy and cache key Determine whether a query string, header, or cookie selects a different rendition or response, then include only the required values in the cache key and forward them as needed.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Or let it run in the cloud

CloudFront is a configurable delivery layer for packaged video, not a one-click way to keep a YouTube channel live from uploaded recordings. For that separate use case, StreamNeo keeps an uploaded recording or playlist running on YouTube: upload a video, add your YouTube stream key, and go live. Nothing has to stay on at home; it streams the uploaded file at its original quality up to 4K 60fps for one flat price per slot, automatically recovers if YouTube drops the stream, and the first day is free with no card. Monthly: $9.99 per month. See StreamNeo or start the free first day.

Best Value
iseevy H.265 H.264 HDMI Video Encoder Support SRT RTMP RTMPS RTSP UDP HTTP Protocols
  • Up max to 1080P@60fps HDMI Video
  • H.265, H.264 high/main/baseline profile video code and AAC/MP3 audio code
  • RTMP/RTMPS/SRT/RTSP/UDP/HTTP/Multicast/Unicast Protocols
  • Support text and image OSD management
Rank #4
UGREEN Full HD 1080P 30fps Video Capture Card 4K HDMI to USB 2.0
  • The UGREEN HDMI Capture Card supports YCbCr 4:2:0 color sampling, accepts input resolutions up to 4K@60Hz, outputs up to 1080P@30Hz, and features a USB 2.0 high‑speed transmission port for connectivity. This product is connected to audio and video signal sources, such as cameras, and camcorders through the HDMI interface, and transmits it to a device with a USB or type C interface for the recording. Note: This product does not support capture and recording if the signal source is HDCP encryption protocol
  • Dual Interface Apply to both Phone and Computer: With USB-A & USB-C dual interface design, this capture card for streaming can be compatible with most current laptops, tablets, mobile phones, cameras, webcams, Kindle, and other devices. It can be used for camera live broadcasts, mobile game live streaming, console game live streaming, and computer live streaming. Note: iPadOS devices need to be updated to 17 or higher to use it
  • Plug and Play, Driver free: No driver required and no external power supply, just connect and start high-definition reproduction of videos. Aluminum-alloy shell, make sure a longer use life. This 4k capture card weighs only 19.9g, making it light and portable. Switch/Switch 2/Xbox/PS5/PS4 support this capture card when HDCP is turned off
  • HDMI Low Latency Screen Share: With Smart Chip, this HDMI video capture transmission rate is up to 480Mbps, low latency, and no caton. Real-time recording and collection of important meetings or courses for easy review. The latest design of the 4K capture card allows you to enjoy ultra-low latency during live gaming or video recording, avoiding freezing and blue screens
  • Wide Compatibility: This HDMI capture card is compatible with Windows 8.1/10, Linux, iOS17, and Android. The USB capture card is suitable for live streaming, recording, editing, and transferring video in high resolution on OBS, XSplit, Potplayer, QuickTime Player, USB Camera Viewer, and more. Please note: iPadOS devices need to be updated to 17 or higher to use it. This product does not support capture and recording if the signal source is HDCP encryption protocol

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.