...
As of packgecloud:enterprise 2.0.7, with CloudFront enabled, only packages are accessed and cached through CloudFront, repository metadata still goes to S3 using SigV2 signed URLs.
Starting with packagecloud:enterprise 3.0.0, packages and repository metadata will be accessed through CloudFront (to mitigate the June 4, 2019 SigV2 deprecation), but only packages will be cached, repository metadata is pass-through onlywill be passed-through to ensure Package Managers always see the latest generated indexes.