This release introduces embargoed assets — a feature that restricts public access to assets based on customer requirements. When activated, the feature serves assets from a ***.secure.ctfassets.net domain, which requires incoming requests to be authenticated by attaching a dynamically generated signature before fetching the asset file.

Embargoed assets can be configured to cover only unpublished assets or all assets within the space. The feature is available to all enterprise customers and can be enabled on a per-space basis. To activate the feature please reach out to our customer support team.

Please note that while Contentful provides the necessary documentation and tooling, it is up to the customer to implement the authentication service on the client consuming Contentful data. You can learn more about embargoed assets by reading the feature overview and an implementation tutorial.