Added caveat about IAM access policies for allowing access to CloudFront.