R2 custom domain signed urls only

Developers Storage
1

Is is possible to have only S3 signed url downloads allowed and served via custom domain?

I’d like my users to download files via my domain and only signed urls.