The bucket market-static-wk36ff holds the market's files and is private; its policy is left over from last year's CDN setup. The API runs behind the load balancer market-alb and answers /api/monsters. ~/dist.json is a distribution configuration with the bucket as its only origin and two gaps in capitals. ~/index-v2.html is the new home page.

1. Create an origin access control market-oac for S3, signing always with sigv4, and fill in ~/dist.json. Keep the Comment market.
2. Before creating it, extend ~/dist.json: requests to /api/* must go to the load balancer, never be cached, and be refused over plain HTTP.
3. Create the distribution. Keep its id in DIST and its domain name in CF.
4. Only this distribution may read the bucket. Once the distribution is Deployed, curl -si https://$CF/ twice and read X-Cache; the bucket's own URL must still answer 403. (An error answer stays at the edge for 10 seconds.)
5. Upload ~/index-v2.html as the bucket's index.html. The edge still serves the old page; make it serve the new one.