"CloudFront Access DEnied After a Clean S3 Deploy? Check Your Bucket Root Structure First"

If you've ever pushed a perfectly successful build to S3, wired it up to CloudFront, hit the URL -...