Going from client > route 53 address > cloudfront > custom ec2 origin

I am also going to georestrict my distribution which is the main point I wanted to do this