sslSupportMethod property

How you want CloudFront to serve HTTPS requests. One of vip, sni-only, or static-ip. Required if you specify acmCertificateArn or iamCertificateId. NOTE: vip causes CloudFront to use a dedicated IP address and may incur extra charges.