We are using AWS Kinesis to show live & recorded videos on our Vue application, we want to add the option of downloading an MP4 video clip according to a user request, in order to do that I want to use the GetClip API which responses with the MP4 video file that can be quiet large (up to 100MB). So I want to ask it directly from AWS, however currently all our either requests (Such as GetHLSStreamingSessionURL) to AWS Kinesis going through our server for security reasons.

My question is are there any secure way to ask for Kinesis resources directly from the client application? what are the best practices in order to do that? How can that be achieved without storing AWS sensitive information?