CloudFront → ALB (HTTPS) → EC2 (HTTP)
ALB: ACM Public Certificate with DNS Validation
EC2: Python HTTP Server on port 80
CloudFront to ALB encrypted with HTTPS