Stopping Host Spoofing via X-Forwarded-Host with a CloudFront Function
Replacing a Public ALB Behind CloudFront with VPC Origins + an Internal ALB, and Moving to ECS Native Blue/Green