You should really be using an OAI to let cloudfront get your content, serve out of there with a local cache policy.. https://docs.aws.amazon.com/AmazonCloudFro

You should really be using an OAI to let cloudfront get your content, serve out of there with a local cache policy.. https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html https://docs.aws.amazon.com/AmazonCloudFront/latest/Develope... Open bucket is an antipattern here.