I'm using Cloudfront with an S3 origin that is using KMS to encrypt objects. I'm getting the following error when sending a GET request for an object in the S3 bucket.
Requests specifying Server Side Encryption with AWS KMS managed keys require AWS Signature Version 4.
I assumed Cloudfront would be smart enough to use AWS Signature Version 4 when requesting the object, but perhaps not?
Does anyone have experience with this and know if there is a way to get Cloudfront's origin access identify to use signature v4?