即使IAM策略授予访问权限，Web应用程序也无法访问专用s3文件

I am using CarrierWaveDirect to upload a high resolution images to s3. I then use that image to process multiple versions which are made public through Cloudfront urls.I am using CarrierWaveDirect to upload a high r