I have a Drupal site running on load-balanced Elastic Beanstalk environment (nginx with PHP FPM) and it was working fine. However, I recently added another layer in front with Cloudfront so I could setup multiple origins. When I did, the X-Forwarded-Proto as seen on the server returns http vs. https, so the Drupal site then generates various URLs using that scheme vs. the intended one.