Use an origin request policy that's managed by Amazon CloudFront instead of creating and managing your own.