stlondemand/aws_cf_signer — pull request #2 by nerdrew (2011-12-30 20:43:51+00:00)
Title: Adding the resource name doesn't mean it needs to have a custom policy.

http://docs.amazonwebservices.com/AmazonCloudFront/latest/DeveloperGuide/RestrictingAccessPrivateContent.html#CannedPolicy

It can use the canned policy with a custom resource name.