A digital media streaming provider uses Amazon CloudFront to distribute video content stored in Amazon S3 to the public. The company wants to implement access controls for this content to ensure only authorized users can stream it. Some clients use custom HTTP tools that do not support cookies, and others are using fixed, unchangeable URLs to access the content. What combination of solutions will enforce access restrictions with minimal disruption to existing users?