You have created a website hosted in S3 and configured a CloudFront web distribution. Which steps do you need to take to force your users to access your site using CloudFront and not directly using the S3 url? (Choose 3)
You do not
Create an origin access identity for your S3 origin
Surely it’s created for the cloudfront distribution
The action of creating the CloudFront distribution, does not automatically set up an origin access identity. If you didn’t create an origin access identity when you created your distribution, you can configure it afterwards by doing the following:
Precisely… if you read the description you create the OAI for the cloudfront distribution, NOT the s3 origin!