When you want to serve private S3 content securely through a custom domain, the workflow involves CloudFront, ACM certificates, and careful DNS validation. Here’s the full process we followed, including the common pitfalls and how we solved them.
- Goal: Prevent direct public access to S3 objects.
- Action: