Unless you're managing the webserver process yourself, Amazon has the exact same level of control over who can visit your website as Cloudflare. When you're ma

Unless you're managing the webserver process yourself, Amazon has the exact same level of control over who can visit your website as Cloudflare. When you're managing the webserver yourself, they can still filter by IP as they run the network. With a bit more effort (but this feels unlikely to be happening wide-scale), they can still transparently MITM your connections as the private keys are still stored on their infrastructure.