1. A Content Delivery Network.
2. Static and dynamic website data, videos, images, and any cacheable application components.
3. An origin.
4. There is nothing to do, as CloudFront is inherently protected from DDoS.
5. An Origin Access Identity (OAI) on CloudFront.
6. Web and RTMP.
7. First, disable it, then wait for the status to change to deployed.