Ensure CloudFront origins don't use insecure SSL protocols

CloudFront should not have distributionConfig.origins.items with [ customOriginConfig.originSslProtocols.items contain [ 'SSLv3' ] ]

To set the origins to the latest TLS version (and don't use the insecure SSL protocol), use the template as shown below:

resource 'aws_cloudfront_distribution' 'example_name_distribution' {
	...
	origin {
		custom_origin_config {
			origin_ssl_protocols = ['The latest TLS version currently (TLSv1.2)']
		}
	}
}

Run the following command to extract all the configuration information from the Amazon CloudFront distribution that you want to reconfigure:
aws cloudfront get-distribution-config --id EXAMPLE_ID --query 'DistributionConfig'

Modify the configuration document that got returned by removing the deprecated SSLv3 protocol from the 'OriginSslProtocols' configuration object
and set the TLS protocol as the latest one available (that you can use).

MAKE SURE: when you remove any protocol from the 'OriginSslProtocols' in the configuration object - you need to change the 'Quantity' field accordingly!
if you only remove the SSLv3, decrease the quantity by 1, if you remove everything except the latest TLS version, change the quantity to 1, and etc.

Save the document with the modified distribution configuration to a JSON file named configure-protocols.json

Run the following command to get the current version of the configuration available for the selected distribution:
aws cloudfront get-distribution-config --id EXAMPLE_ID --query 'ETag'

Run the following command using the modified configuration document(i.e. configure-ssl-tls-protocols.json) as the distribution configuration document.
--if-match parameter represents the current version of the configuration, returned at last step:

aws cloudfront update-distribution --id EXAMPLE_ID --if-match ETAG_VALUE_RETURNED --distribution-config file://configure-protocols.json --query 'Distribution.Status'

The command output should return the status of the modified CloudFront distribution - 'InProgress',

Repeat these steps for each origin that you want to reconfigure, and for each CloudFront distribution deployed in your AWS cloud account.