Cloudfront with S3 origin returns AccessDenied when using OAI restricted bucket policy

Question

I am trying to deploy a static website to S3, and serve it up via Cloudfront. I am using serverless to generate the Cloudformation resources. Once the resources are created,