Try the storage
Upload a file and compare the two links: one signed, one not. Same file, same moment, and only one opens.
Up to 25 MB. Demo files are deleted after 60 minutes.
How you want the link
The same things your backend decides on every call. Change them and re-sign — the file is not uploaded again.
Serve the first seconds at full speed and cap after, so playback still starts instantly.
What just happened
The file went from the browser straight to storage without passing through our API — we only issued the permission to put it there. Then we asked for a signed link, which is what you would hand each viewer. Everything you changed above is a parameter of that same call: one line in your backend, and the restriction is applied at the CDN edge before a single byte is served.