Configure HTTPS for custom domain

[replakcan]

Description

Ensure the custom domain serves the website over HTTPS.

Scope

• Attach ACM certificate to CloudFront
• Configure viewer protocol policy
• Verify HTTPS works
• Verify HTTP redirects to HTTPS if configured

Out of Scope

• Domain purchase
• Route 53 migration
• Security headers

Acceptance Criteria

• ACM certificate is attached to CloudFront
• HTTPS works on custom domain
• HTTP behavior is defined
• Browser shows secure connection
• CloudFront distribution deploys successfully

Technical Notes

• Certificate for CloudFront must be in us-east-1.

Related

• Depends on: Add custom domain with Route 53 and ACM