https://thuongnn.dev/posts/aws/networking/cloudfront-security/