I'm surprised that CDK didn't output the bucket's public-facing address! This is especially necessary because CDK adds a UUID to the combined stack and bucket names, so there was no way to guess what it would be. I had to jump onto the AWS console, find the new bucket and hit the "Open" button to get it.