It works.

This page is served from sites/hello/public/ by the static sites platform.

If it loads over HTTPS at hello.sites.psc.com, the bucket, the CloudFront tenant, its certificate and the DNS record are all wired up.