Cloudfronted, non-public s3 bucket, public static site.