CloudFront created the web distribution, which was required for configuring the TLS certificate using letsencrypt-s3front. General: select “Custom SSL Certificate” and enter the Letsencrypt TLS certificate from the drop-down (this was was pre-allocated with my Letsencrypt TLS certificate). With that, CloudFront was configured to serve this site from my S3 bucket over HTTPS using my Letsencrypt TLS certificate.