I have a CloudFront distribution pointing to an Application Load Balancer, which is load balancing to ECS containers running a Django app. The ALB target group has stick sessions enabled using Application-based cookie, set to Django’s sessionid cookie which is Django’s main “logged-in” user indicator.