A presigned URL is valid, but the CDN cache key ignores one scoping parameter and content becomes reusable outside the intended request context

Object access control is strong at origin, yet the edge cache weakens it by collapsing distinct authorization contexts.