CloudFront: your distributions should be associated with a SSL certificate (ACM or IAM).
You should add a SSL certificate to your CloudFront distributions to protect your users data. The SSL/TLS certificate can be stored in:
- Identity and Access Management (IAM),
- or Certificate Manager (ACM).
https://aws.amazon.com/premiumsupport/knowledge-center/install-ssl-cloudfront/