Use a proxy to provide a single point of access for artifacts download links while being able to forward requests to anyplace.
Consider Content Delivery Network solution (CDN) like Cloudfront or similar.
- Make the hostname in the artifacts download URL configurable on a global (config file/env variable) way
- Make the hostname in the artifacts download URL overridable on a per-tenant level, providing an optional field in tenantadm
- If the hostname is specified, URLs provided by deployments service do not lead directly to AWS