title: Amplify publish causes AccessDenied error
body: <p>I deploy a simple web app to <code>S3</code> via <code>amplify publish</code>. The hosting has <code>Cloudfront</code> enabled (I selected the PROD environment in amplify while setting up hosting) and I'm working in the <code>eu-central-1</code> region. But whenever I try to access the <code>Cloudfront</code> URL, I receive an <code>AccessDenied</code> error.</p>
  
  <p>I followed a tutorial at <a href="https://medium.com/quasar-framework/creating-a-quasar-framework-application-with-aws-amplify-services-part-1-4-9a795f38e16d" rel="noreferrer">https://medium.com/quasar-framework/creating-a-quasar-framework-application-with-aws-amplify-services-part-1-4-9a795f38e16d</a> an the only thing I did differently was the region (tutorial uses <code>us-east-1</code> while I use <code>eu-central-1</code>). </p>
  
  <p>The config of S3 and Cloudfront was done by amplify and so should be working in theory:</p>
  
  <p><strong>Cloudfront:</strong></p>
  
  <ul>
  <li>Origin Domain Name or Path: <code>quasar-demo-hosting-bucket-dev.s3-eu-central-1.amazonaws.com</code> (originally it was without the <code>eu-central-1</code>, but I added it manually after it didn't work). </li>
  <li>Origin ID: <code>hostingS3Bucket</code></li>
  <li>Origin Type: <code>S3 Origin</code></li>
  </ul>
  
  <p><strong>S3 Bucket Policy:</strong></p>
  
  <pre><code>{
      "Version": "2012-10-17",
      "Id": "MyPolicy",
      "Statement": [
          {
              "Sid": "APIReadForGetBucketObjects",
              "Effect": "Allow",
              "Principal": {
                  "AWS": "arn:aws:iam::cloudfront:user/CloudFront Origin Access Identity ********"
              },
              "Action": "s3:GetObject",
              "Resource": "arn:aws:s3:::quasar-demo-hosting-bucket-dev/*"
          }
      ]
  }
  </code></pre>
  
  <p>Research showed me that <code>Cloudfront</code> can have temporary trouble to access <code>S3</code> buckets in other regions. But I manually added the region to the origin in <code>Cloudfront</code> AND I have waited for 24h. I still get the "access denied".</p>
  
  <p>I suspect this has something to do with the <code>S3</code> bucket not being in the default <code>us-east-1</code> region and amplify not setting up <code>Cloudfront</code> correctly in that case.</p>
  
  <p>How can I get amplify to set the <code>S3</code> bucket and <code>Cloudfront</code> up correctly so that I can access my website through the <code>Cloudfront</code> URL?</p>