In CloudFront in AWS Console I can create Public Keys, Key Groups and associate a Web Distributions Behavior with the trusted Key Group. I'd like to, at a minimum, create Key Groups and associate them with behaviors so I can serve private content out of Web Distributions created by CDK.

Use Case

I want to serve private content out of a Web Distribution created via CDK.