CloudFront canned signed url support