Secure the content that you serve through CloudFront, and restrict access to private content by using signed URLs or signed cookies.