https://docs.aws.amazon.com/cli/latest/reference/cloudfront/index.html#cli-aws-cloudfront https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html