Hey,
I had the same issue when uploading a media, everything was fine except the thumbnail in the back-office.
In fact, I just needed to add the CDN URL to the authorized srcs
module.exports = ({ env }) => [
"strapi::errors",
{
name: "strapi::security",
config: {
contentSecurityPolicy: {
useDefaults: true,
directives: {
"connect-src": ["'self'", "https:"],
"img-src": [
"'self'",
"data:",
"blob:",
"dl.airtable.com",
`https://${env("AWS_BUCKET")}.s3.${env("AWS_REGION")}.amazonaws.com/`,
env("CDN_URL"),
],
"media-src": [
"'self'",
"data:",
"blob:",
"dl.airtable.com",
`https://${env("AWS_BUCKET")}.s3.${env("AWS_REGION")}.amazonaws.com/`,
env("CDN_URL"),
],
upgradeInsecureRequests: null,
},
},
},
},
"strapi::cors",
"strapi::poweredBy",
"strapi::logger",
"strapi::query",
"strapi::body",
"strapi::session",
"strapi::favicon",
"strapi::public",
];
Hope it helps you