title: Can I use signed and unsigned urls on the same Cloudfront distribution?
body: <p>The title more or less says it all. Judging from the fact that "restrict viewer access" section of the Cloudfront management console (picture below) uses radio buttons, It appears that its an either/or situation.<img src="https://i.stack.imgur.com/JULeb.png" alt="cloudfront console"></p>
  
  <p><strong>QUESTION:</strong> Are there other ways to parse one's S3 bucket such that it can have both public (i.e., viewable by anyone) and private (i.e., signed urls) content in it?</p>