I ran into a similar issue with Leaseweb a couple of months ago, after a correctly working account was "migrated" to a new account. There were 2 different settings in the Leaseweb CDN that caused an inordinate amount of transfers out of the S3 origin into the CDN cache. One was a TTL (time to live) policy option to "Honor Origin TTL" - this needed to be disabled. The other setting was the TTL that is used when not using the origin TTL, the default value of which was 86400 (1 day) - this needed to be changed to 2592000 (30 days). After doing this the cache hits increased from under 70% to about 99% and the S3 traffic decreased back to a minimal level.