A developer has deployed a static website's assets to an Amazon S3 bucket and is using Amazon CloudFront with origin access control for distribution. Users can access specific pages but encounter errors when trying to access directories without a file name, such as '/products/'. The developer must enable directory access without specifying a file name and without making the S3 bucket public. What is the appropriate solution?