How to secure image loading via aws presigned url?

Question

Amazon Web Services

There is a flow where a screenshot of a web page is created and saved as a file on S3. At the moment, it has been done through an interlayer in the form of my server, and from it the download is already on S3. From the front I get the image in base64.
I want to use aws presigned url, but I don't understand how access is regulated and configured.
What is the right thing to do here so as not to get a bulk download of images from everywhere? Is it possible to generate this url on the back through your action and control the number of requests for your action only?