Use your CloudFront distribution to restri…
https://repost.aws/knowledge-center/cloudfront-access-to-amazon-s3
When your users access your Amazon S3 files through CloudFront, the CloudFront origin access identity gets the files on behalf of your users. If your users request files directly by using Amazon S3 URLs, they're denied access. The origin access identity has permission to access files in your Amazon S3 bucket, but users don't. Open the CloudFront console. Choose the distribution that serves content from the S3 bucket that you want to restrict access to. Choose the Origins tab. Select the S3 origin, and then choose Edit. For Origin Access, select Legacy access identities.
Open the CloudFront console.
Choose the distribution that serves content from the S3 bucket that you want to restrict access to.
Choose the Origins tab.
Select the S3 origin, and then choose Edit.
For Origin Access, select Legacy access identities.
DA: 20 PA: 73 MOZ Rank: 22