Managing secure content in a content delivery network

A system for managing content requests comprising:

• one or more first storage devices including a hardware processor and a memory, the one or more first storage devices configured to:
• host or process content on behalf of an original content provider;
• receive a client request for an embedded resource from a client computing device, the client request being associated with an embedded resource identifier and the client request including first signature information originally provided to the client computing device from the original content provider;
• and
• provide the embedded resource to the client computing device based on processing the first signature information;
• and
• one or more second storage devices including a hardware processor and a memory, the one or more second storage devices configured to:
• receive a first storage device request for an embedded resource from one of the one or more first storage devices, the first storage device request including second signature information, the second signature information being different from the first signature information;
• and
• responsive to the first storage device request, provide the embedded resource to the first storage device based on processing the second signature information, the provision of the embedded resource further in accordance with an access control list identifying one or more entities that are allowed to access the requested resource.