Hello from Autodoc
If you are reading this over HTTPS, the whole chain is working: CloudFront terminated TLS, signed a request to a private S3 bucket with Origin Access Control, and served this page.
OriginPrivate S3
AccessOAC only
EdgeCloudFront
LogsCloudWatch