My record A is on Route 53 point to CloudFront distribution. In the Origin Requests Policy, I choose whitelist all the viewer headers. The Origin of CloudFront is an ELB, which
