When setting up the behaviour variable in Amazon CloudFront distribution settings make sure you select to redirect http to https

Not much else to say here. If you set your Cloudfront distribution to https only (as some tutorials claim) then you’re at risk of rejecting any non https traffic.