A company is building a mobile app on AWS. The company wants to expand its reach to millions of users. The company needs to build a platform so that authorized users can watch the company’s content on their mobile devices. What should a solutions architect recommend to meet these requirements?

1. Publish content to a public Amazon S3 bucket. Use AWS Key Management Service (AWS KMS) keys to stream content.
2. Set up IPsec VPN between the mobile app and the AWS environment to stream content.
3. Use Amazon CloudFront. Provide signed URLs to stream content.
4. Set up AWS Client VPN between the mobile app and the AWS environment to stream content.