I've seen this attack with cloudfront and an S3 bucket. You can verify your domain is going to a cloudfront you own, but it doesn't verify that the origin is a

I've seen this attack with cloudfront and an S3 bucket. You can verify your domain is going to a cloudfront you own, but it doesn't verify that the origin is a bucket you own.