CloudFront can also help us to simplify the process of encrypting data in transit to and from our CloudFront distribution with SSL/TLS.
We can control the encryption between our client and the distribution by selecting any of the supported encryption protocols and ciphers. AWS will always ensure that only the secure protocols and ciphers are supported, but if we have special requirements laid out by certain compliance standards, then we have complete control over which protocols and ciphers we allow.
We can also use AWS Certificate Manager (ACM) with CloudFront, which allows us to create a completely free SSL certificate for our domain and attach it to our distribution. ACM also allows us to automatically update and renew the certificate for our domain so that we never need to worry about the SSL certificates expiring and we can dramatically reduce the cost of running...