Cloudfront Canned Policy Signing