AwsStaticSiteBucketPolicy.js

{
   "Version":"2008-10-17",
   "Statement":[
      {
         "Sid":"PublicReadGetObject",
         "Effect":"Deny",
         "Principal":"*",
         "Action":[
            "s3:GetObject",
            "s3:PutObject"
         ],
         "Resource":"arn:aws:s3:::{bucket_name}/*",
         "Condition":{
            "Bool":{
               "aws:SecureTransport":"false"
            }
         }
      },
      {
         "Effect":"Allow",
         "Principal":{
            "AWS":"arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity E1K1EAJVVK5H0F"
         },
         "Action":"s3:GetObject",
         "Resource":"arn:aws:s3:::{bucket_name}/*"
      }
   ]
}