viewer certificate

 viewer_certificate {
   cloudfront_default_certificate = true
 }

See also

• aws_cloudfront_distribution: domain_name, s3_origin_config, default_cache_behavior, restrictions