https://ivangrigoryev.com/en/how-to-serve-cloudfront-with-cname-over-own-ssl-certificate/