AWS S3 Deny File Access With Mapped Domain

Question

I have mapped the https://s3.eu-central-1.amazonaws.com/cdn.example.com/ succesfully to cdn.example.com and now I have problems with file policys. And