How to return a 404 response code for CloudFront requests (S3 origin) of a non-existent S3 object: http://aawaara.com/post/146226425447/how-to-return-a-404-response-code-for-cloudfront

s3_bucket_policy.json

{
	"Version": "2008-10-17",
	"Id": "PolicyForCloudFrontPrivateContent",
	"Statement": [
		{
			"Sid": "1",
			"Effect": "Allow",
			"Principal": {
				"AWS": "Enter your CloudFront Origin Access Identity here"
			},
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::my_bucket_name/*"
		},
		{
			"Sid": "2",
			"Effect": "Allow",
			"Principal": {
				"AWS": "Enter your CloudFront Origin Access Identity here"
			},
			"Action": "s3:ListBucket",
			"Resource": "arn:aws:s3:::my_bucket_name/*"
		}
	]
}