Status: IN
CloudFront Viewer Protocol Policy has two HTTPS enforcement options: "Redirect HTTP to HTTPS" (returns 301 for GET/HEAD) and "HTTPS Only" (returns 403 for all HTTP).
Source: entries/2026/03/08/cloudfront-ssl.md
JSON