Access Denied error when accessing Cloudfront url image link

Hello -

I understand your experiencing an access denied error unexpectedly when accessing CloudFront URL image links and S3 buckets. 
 
This article might help you troubleshoot the issue. 
https://aws.amazon.com/premiumsupport/knowledge-center/s3-website-cloudfront-error-403/
 
Steps you could possibly check:
1. Confirm that the objects in the bucket are not encrypted by AWS KMS
2. Confirm that there is no explicit "Deny" in the bucket policy for the s3:GetObject action
3. Confirm that Amazon s3 block public access is turned off for the bucket
4. Confirm that objects in the bucket are publicly accessible
5. If you're using a Referer header to restrict access from CloudFront to your S3 origin, then review the custom header
6. Confirm that there's no explicit "Deny" Service control policies (SCPs) attached by your organization's management account
 
I hope that helps you troubleshoot the access denied error.