I was looking for a cheap AWS service that would terminate TLS and also take care of signing an Amazon certificate for an internal application. I found that I can use Cloudfront with a custom origin pointing to the public IP of an EC2 instance.
I have built the mentioned setup and it works just fine, but I had to open the application port on my EC2 instance to the world and it speaks http. Is that safe or does my cost optimization make no sense?
Thanks for any help! :)