title: Customize Origin Protocol Policy for S3-website origins (HTTP-only)
body: <p>Previously I've been able to configure the "Origin Protocol Policy" for my S3 website endpoints so that they are HTTP-only. This is <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginProtocolPolicy" rel="nofollow noreferrer">still advised here</a>.</p>
  
  <p>Now <a href="http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/using-https-cloudfront-to-s3-origin.html" rel="nofollow noreferrer">this page</a> states that the default value for "Origin Protocol Policy" is "Match Viewer" and that it cannot be changed. </p>
  
  <p>Is this a recent change? I still have several origins with "Origin Protocol Policy" set to "HTTP only" but can't find any way to change it for more recently created distributions/origins.</p>
  
  <p>How do I now serve my Cloudfront S3-website-backed distributions via HTTPS?</p>
  
  <p>Thanks in advance for any pointers!</p>
  
  <p>X-Post from <a href="https://forums.aws.amazon.com/thread.jspa?threadID=242996&amp;tstart=0" rel="nofollow noreferrer">AWS forums</a> because not much activity there :(</p>