diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
index 978f14fa..8ba37659 100644
--- a/.github/workflows/push.yml
+++ b/.github/workflows/push.yml
@@ -45,27 +45,4 @@ jobs:
         run: |
           npm ci
           npm run test
-        working-directory: infrastructure
-
-  lint:
-    name: Lint
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-
-      - name: Setup Node and Caching
-        uses: actions/setup-node@v3
-        with:
-          node-version-file: '.nvmrc'
-          cache: "npm"
-          cache-dependency-path: infrastructure/package-lock.json
-
-      - name: Build React project
-        run: |
-          npm ci
-          npm run lint
-        working-directory: prototype
-
-
-
+        working-directory: infrastructure
\ No newline at end of file
diff --git a/infrastructure/lib/constructs/spa-website/spa-website.ts b/infrastructure/lib/constructs/spa-website/spa-website.ts
index 89578707..c2f6d359 100644
--- a/infrastructure/lib/constructs/spa-website/spa-website.ts
+++ b/infrastructure/lib/constructs/spa-website/spa-website.ts
@@ -4,7 +4,7 @@ import * as cf from "aws-cdk-lib/aws-cloudfront";
 import * as acm from "aws-cdk-lib/aws-certificatemanager";
 import { Duration, RemovalPolicy } from "aws-cdk-lib";
 import * as route53 from "aws-cdk-lib/aws-route53";
-import { S3Origin } from "aws-cdk-lib/aws-cloudfront-origins";
+import { S3BucketOrigin, S3Origin } from "aws-cdk-lib/aws-cloudfront-origins";
 import { CloudFrontTarget } from "aws-cdk-lib/aws-route53-targets";
 
 export interface ISpaWebsite {
@@ -118,7 +118,7 @@ export class SpaWebsite extends Construct implements ISpaWebsite {
 
         this.spaDistribution = new cf.Distribution(this, 'SpaDistribution', {
             defaultBehavior: {
-                origin: new S3Origin(this.siteOriginBucket),
+                origin: S3BucketOrigin.withOriginAccessControl(this.siteOriginBucket),
                 allowedMethods: cf.AllowedMethods.ALLOW_GET_HEAD,
                 responseHeadersPolicy: new cf.ResponseHeadersPolicy(this, "ResponseHeader", {
                     securityHeadersBehavior: SpaWebsite.defaultResponseHeadersPolicy,