For the time being, I'm just going to use CloudFront, especially because they have some neat features for private content (presigned requests, etc). If costs get out of hand I'll have to consider something else.