Which of the following is true with regards to configuration of https for cloudfront with S3 as the origin. Choose 3 answers from the options given below.

Answer options:

A.Even if an S3 bucket is configured as a website endpoint , https can be used between cloudfront and S3.
B.CloudFront always forwards requests to S3 by using the protocol that viewers used to submit the requests
C.Amazon S3 provides the SSL/TLS certificate
D.If you want to require HTTPS for communication between CloudFront and Amazon S3, you must change the value of Viewer Protocol Policy to Redirect HTTP to HTTPS or HTTPS Only

Answer – B,C and D
The AWS documentation provides the following information
Note the following about using HTTPS when the origin is an Amazon S3 bucket:
· If your Amazon S3 bucket is configured as a website endpoint, you can`t configure CloudFront to use HTTPS to communicate with your origin because Amazon S3 doesn`t support HTTPS connections in that configuration.
· Amazon S3 provides the SSL/TLS certificate, so you don`t have to.
When your origin is an Amazon S3 bucket, CloudFront always forwards requests to S3 by using the protocol that viewers used to submit the requests
If you want to require HTTPS for communication between CloudFront and Amazon S3, you must change the value of Viewer Protocol Policy to Redirect HTTP to HTTPS or HTTPS Only.
For more information on using https with cloudfront as S3 as the origin, please visit the below URL:
http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-cloudfront-to-s3-origin.html