so the way this works is, you only pay for the lift from your EC2 instance to the s3 bucket, then cloudfront serves the bucket directly to public, which is far cheaper than EC2-> public
i dont think ive even triggered the non-free tier of cloudfront yet.