Hosting Static Websites on Amazon S3

Note: Always ensure that making your S3 bucket public is in line with your organization's security policies, as public buckets can expose your data to anyone on the internet.

If your Amazon S3 bucket is configured as a website endpoint, you can't configure CloudFront to use HTTPS to communicate with your origin because Amazon S3 doesn't support HTTPS connections in that configuration.HTTPS between CloudFront and Amazon S3 is not supported when the S3 bucket is configured as a website endpoint.