Can the plugin restrict playback via a fixed IP address only?

This is not regulated by the plugin but rather in your CloudFront account. CloudFront will automatically detect if an IP address has been set and check the plugin request against it. If the plugin requesting a video or audio is not accessed via that IP address, an access denied error will show up. But as such , it has nothing to do with the functionality of the plugin itself.