Exam AWS Certified SysOps Administrator - Associate topic 1 question 293 discussion

To encrypt the traffic in transit for a web application using Amazon CloudFront with an SSL certificate from AWS Certificate Manager (ACM), you should take the following steps: C. Enter the alternate domain name (CNAME) of www.example.com for the CloudFront distribution. Select the custom SSL certificate: This step ensures that CloudFront is configured to use the custom SSL certificate from ACM for encrypting the traffic between the viewer (client) and CloudFront. A. For each cache behavior in the CloudFront distribution, modify the Viewer Protocol Policy setting to redirect HTTP to HTTPS: This step enforces the use of HTTPS by redirecting any HTTP requests to HTTPS. This is an important security practice to ensure that all traffic is encrypted in transit.

AC is correct. On the settings when you create a new CF distribution the second parameter is Alternate domain name (CNAME) - optional here you can add the domain name you will use to access to the CF distribution. And in the bahavior config you need to check "Redirect HTTP to HTTPS" option in the viewer protocol policy.