Deliver leadmagnet with protected personalized URL

I am looking for a dedicated solution:

I want to deliver LeadMagnets (Files like PDF) with personalized time limited URLs. The user should only subscribe to Activecampaign, then gets a tag on AC and then the unique URL(link) will be sent by mail and/or presented on next page after successful login/2optin.

I want to protect the original URL of the file from being downloaded directly.

is this possible? Maybe other solutions to get this done?