best practices with aws cloudfront configuration with s3