Custom domain but with no public access?

Hi,

I added a custom domain media.mysite(.)com for my bucket. I set the CORS so I want my website can access my file only.

[
  {
    "AllowedOrigins": [
      "https://mysite.com"
    ],
    "AllowedMethods": [
      "GET"
    ],
    "AllowedHeaders": [
      "*"
    ]
  }
]

Now, if I visit https://media.mysite(.)com/xxx.mp4, it’s public. I want only mywebsite.com can access file https://media.mysite(.)com/xxx.mp4

How to config? I want to keep both custom domain and limit the public access if user copy URL https://media.mysite(.)com/xxx.mp4 on browser.

Thanks for help