using cloudfront instead of S3