FEAT: Return Playback URL in Get Videos

infrastructure/Pulumi.local.yaml

@@ -25,6 +25,10 @@ config:
     - iam: http://localhost.localstack.cloud:4566
       rds: http://localhost.localstack.cloud:4566
       s3: http://localhost.localstack.cloud:4566
+      # aws@7 reads a bucket's tags back through S3 Control's
+      # ListTagsForResource, so without this override the create call
+      # goes to real AWS and 403s — even though no tags are set here.
+      s3control: http://localhost.localstack.cloud:4566
       sns: http://localhost.localstack.cloud:4566
       sqs: http://localhost.localstack.cloud:4566
       sts: http://localhost.localstack.cloud:4566

infrastructure/main.go

@@ -1046,6 +1046,11 @@ func main() {
 				{Name: "MEDIACONVERT_OUTPUT_BUCKET", Value: bucket.ID().ToStringOutput()},
 				{Name: "MEDIACONVERT_ROLE_ARN", Value: mediaConvertRole.Arn},
 				{Name: "MEDIACONVERT_EVENTS_QUEUE_URL", Value: jobEventsQueue.Url},
+				// The CDN in front of the encoded bucket, which is the only way
+				// that bucket is readable — it blocks public access and grants
+				// only CloudFront's OAC principal. cms rewrites the s3:// paths
+				// MediaConvert reports onto this host.
+				{Name: "PLAYBACK_BASE_URL", Value: pulumi.Sprintf("https://%s", distribution.DomainName).ToStringOutput()},
 			}
 
 			cmsRepo, cmsService, cmsAlb, err = deployFargateService(ctx, "cms", 8081,