Private Buckets with Cloud CDN for serving public assets: A complete walkthrough

How to have your cache and eat it too (securely).