Restrict S3 access from everywhere other than the CloudFront distribution - AWS

Question

I want to access the S3 bucket only from the CloudFront distribution. I want to restrict the access to that particular bucket from everywhere else. How do I do this?

Answer 1

To restrict the access to only the CloudFront, add an origin access identity to your distribution. Then go ahead and review your bucket policy for the following pointers:

• Only the OAI can access the bucket
• CloudFront can access the bucket
• Users cannot access the bucket in any way.