Hi@akhtar,
If you're using Amazon S3 for your origin, you can use an origin access identity to require users to access your content using a CloudFront URL instead of the Amazon S3 URL.
$aws cloudfront create-cloud-front-origin-access-identity --cloud-front-origin-access-identity-config CallerReference="cli-example",Comment="Example OAI"