Your company is implementing a new media storage solution using Amazon S3 and AWS CloudFront. You need to ensure that the CloudFront distribution has the necessary permissions to access the S3 bucket. Which of the following steps should you take to achieve this?