You can setup your .htaccess like this:
SetEnvIfNoCase Host ^cdn\. CDN
AuthUserFile /var/www/html/example.com/.htpasswd
AuthType Basic
AuthName "My Secret Folder"
Require valid-user
Satisfy any
Order deny,allow
Deny from all
Allow from env=CDN