You need to whitelist the Authorisation Header in the AWS CloudFront distrubution. This can be done in the Cache Policy in the Behaviours section. Create a new cache policy , enter a name and in Header select "Authorisation"