Now that we have a cloudfront distribution that sits in front of our private S3 bucket, let's strip out all that signed URL stuff.
Signed URLs are useful for truly private content, but if all you need is more protection and control over files that you want to make publicly accessible, a CDN is a better choice. CDN's like CloudFront not only offer better security than serving files directly from S3 (due to more granular controls, firewalls, and DDoS protection), but they also offer better performance.
Run and submit the CLI tests.