带有过期日期的Cloudfront签名URL可以在我的应用程序中工作，但不能从浏览器中工作

import datetime
from hashlib import sha256
import hmac
import base64

def generate_signed_url(key_pair_id, private_key, distribution_url, path, expires_in):
    expires = datetime.datetime.utcnow() + datetime.timedelta(seconds=expires_in)
    expires_str = expires.strftime('%Y-%m-%dT%H:%M:%SUTC')
    string_to_sign = f'GET\n{distribution_url}\n{path}\n{expires_str}\nx-amz-date:{expires_str}'
    signature = hmac.new(private_key.encode('utf-8'), string_to_sign.encode('utf-8'), sha256).digest()
    signature_b64 = base64.b64encode(signature).decode('utf-8')
    signed_url = f'{distribution_url}{path}?Expires={expires}&Signature={signature_b64}&Key-Pair-Id={key_pair_id}'
    return signed_url

{
    "CORSConfiguration": {
        "CORSRules": [
            {
                "AllowedHeaders": ["*"],
                "AllowedMethods": ["GET"],
                "AllowedOrigins": ["*"],
                "ExposeHeaders": []
            }
        ]
    }
}