title: Access Denied (403) with ordered cache in Cloudfront s3 distribution
body: <p>I am trying to add multiorigin setup with cloudfront with ordered cache behaviour. Here is what i want to achieve(given my baseurl is <a href="https://example.com/" rel="nofollow noreferrer">https://example.com/</a></p>
  <ol>
  <li><a href="https://example.com/" rel="nofollow noreferrer">https://example.com/</a> shows index.html from root bucket.(root_app)</li>
  <li><a href="https://example.com/app2" rel="nofollow noreferrer">https://example.com/app2</a> shows index.html from another bucket (app2)</li>
  </ol>
  <p>For this, I created a CF s3 distribution with two origins (root, app2) pointing to two different buckets. In the cache behavior, I have created ordered cache behavior to route all traffic with path &quot;app2*&quot; to app2 origin.</p>
  <p>With this setup <a href="https://example.com/" rel="nofollow noreferrer">https://example.com/</a> is landing me to root_app but <a href="https://example.com/app2" rel="nofollow noreferrer">https://example.com/app2</a> is throwing below error</p>
  <pre><code>&lt;Error&gt;
  &lt;Code&gt;AccessDenied&lt;/Code&gt;
  &lt;Message&gt;Access Denied&lt;/Message&gt;
  &lt;RequestId&gt;E1C4FA78C620F166&lt;/RequestId&gt;
  &lt;HostId&gt;nwVnR036HRHWVwiQoEoJQaj9A/Mf975SUYOoiYrgX8JasQCEWRrEeNTvBM5y327gZzcfCLksCDY=&lt;/HostId&gt;
  &lt;/Error&gt;
  </code></pre>
  <p>I see below http response headers in the browser for above request</p>
  <pre><code>content-type: application/xml
  date: Sun, 06 Sep 2020 06:34:06 GMT
  server: AmazonS3
  status: 403
  via: 1.1 45645ff3269a2b885ffa1653e827d0f7.cloudfront.net (CloudFront)
  x-amz-cf-id: vVTtxpNxuilWppQ2mskMvN-p7fbNBM8DqHvVYQMYV8-kH-4GVtRHNw==
  x-amz-cf-pop: SFO20-C1
  x-cache: Error from cloudfront
  </code></pre>
  <p>Any idea what's wrong with this flow?</p>