Yes.
EDIT: specifically, it is do intercepting a request doesn’t allow you to issue new requests.
For example, S3. S3’s authentication scheme allow you create a limited used download link and passing to a untrusted user
Yes.
EDIT: specifically, it is do intercepting a request doesn’t allow you to issue new requests.