s3 cloudfront restriction permissions

Jan 23, 2022

{
“Version”: “2008-10-17”,
“Id”: “PolicyForCloudFrontPrivateContent”,
“Statement”: [
{
“Sid”: “1”,
“Effect”: “Allow”,
“Principal”: {
“AWS”: “arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity <cloudfront Identity>”
},
“Action”: “s3:GetObject”,
“Resource”: “arn:aws:s3:::<bucket>/*”
}
]
}