I want to connect Cloudfront to an internal load balancer which is connected to my application. Inbound traffic comes from a third party application so I cannot only use the internal load balancer. The process would be:
third party app <-> cloudfront <-> internal load balacner <-> my application
However, I am not sure if Cloudfront can access the load balancer in my VPC. Any ideas how that would that be setup?
Unfortunately at this time there is no way to connect to private AWS resources, there are 2 types of Origin.
Just because your load balancer is public you can still enhance your security to reduce the threat of an unknown source accessing your load balancer.
You could add a custom header to your requests containing a secret. Then if you use an application load balancer attach a WAF with a default to block all requests. Finally add an allow rule to WAF to allow where the header has a value of your secret.