Ensure that field-level encryption is enabled for your Amazon CloudFront web distributions.
With Amazon CloudFront, you can enforce secure end-to-end connections to origin servers by using HTTPS. Field-level encryption adds an additional layer of security that lets you protect specific data throughout system processing so that only certain applications can see it.
Enable field-level encryption for CloudFront distributions.