I recently published a blog entry on the AWS Compute Blog on how to solve an issue with CloudFront authenticated requests to an S3 origin using Lambda@Edge.