I am using a CF Worker as a front to an S3 bucket. The worker fetches the file from S3 bucket using AWS sdk to presign the request (the bucket is not publicly accessible)
It works okay, but I get a cache MISS every time because the URL that goes to S3 contains the signature key in a query parameter.