A. There is no record in Route 53 pointing cdn.yourdomain.com to the CloudFront ALIAS.
B. You need to create Origin Access Identity for CloudFront and add it to your bucket policy. [1] Most Voted
D. There is no rule in your bucket policy allowing public access.

- Awsexamhub website is not related to, affiliated with, endorsed or authorized by Amazon.
- Trademarks, certification & product names are used for reference only and belong to Amazon.