Create a second cache behavior for the login page with unrestricted access, retaining the default behavior for private content.

Modify the default cache behavior for the login page with unrestricted access, and add a second behavior for the rest of the content with restricted access.

Utilize a failover origin in the cache behavior for the login page with unrestricted access, while keeping the primary origin for private content.

Adjust the S3 bucket policy for login page access and use a CloudFront function to handle unauthorized redirects to the login page URL.