AWS S3 bucket policy for only public from CloudFront and upload from Signed Url
By MinK at Oct 27 2021