Cloudfront distribution access to private S3 bucket

I have a static website deployed on an S3 bucket (with Static Website Hosting enabled), and with all public access enabled, as described in the tutorials. I have created a cloudfront distro pointing to that website/bucket.

Is there a way to turn 'off' the public access to the S3 bucket so that the only access to the website is via the cloudfront distro?

Do I use