Background
If your using an Amazon Web Services (AWS) S3 bucket as your storage type, the video is directly streamed when a user watches it.
Answer
For AWS we generate a so-called “presigned URL”
https://docs.aws.amazon.com/AmazonS3/latest/userguide/ShareObjectPreSignedURL.htmlto grant time-constrained permission to the video. The access time is limited to the video duration + one hour.
In order to be able to watch the video, the user needs Internet access (e.g. via a proxy) on his or her client device.