DO-1608: use most recent cipher suite for CloudFront distribution security policy

[crispy101]

Description of the proposed changes

• Get rid of SSL/TLS ciphers that do not offer forward secrecy (FS) also known as perfect forward secrecy (PFS).
  It's a feature that provides assurances the session keys will not be compromised even if server's private key is compromised.

Screenshots (if applicable)

Other solutions considered (if any)

Notes to PR author

⚠️ Please make sure the changes adhere to the guidelines mentioned here

Notes to reviewers

🛈 When you've finished leaving feedback, please add a final comment to the PR tagging the author, letting them know that you have finished leaving feedback