Starting today, Amazon CloudFront has made the process of adding an alternate domain name to a distribution even more secure than before. Now, when you add an alternate domain name, like www.example.com, to a distribution, you must also attach a SSL/TLS certificate to that distribution that covers the alternate domain name. With today’s release, only those with authorized access to your domain’s certificate can add your domain to a CloudFront distribution as an alternate domain name.