How item image inside of corporate network can be accessible for RPASCE

Hi all,

I'm working on RPASCE Server: 25.1.101.0.8.2580.

We are going to build/connect a couple of things based on RPAS Cloud Edition.

1. Assortment Plan based on RPASCE.
2. A picture storage on AWS but sitting inside of a corporate network.
3. Set the corporate authentication system applying SAML 2.0 as ID provider in IDCS domain on top of the RPASCE.

I think no matter in future whether the RPASCE application access itself will be bring into the corporate network or kept open on Internet, when the image loading request is sent from the browser, some authentication/authorization info have to be communicated between browser, image server, and authen/author system to make sure the resource is exposed to authorized account logged on the request initiating end.