Routing an Externally Managed Subdomain to Cloudflare Workers — Adding AWS CloudFront + WAF as a Front Layer
An attempt to assign a subdomain managed by an external organization's DNS as a Cloudflare Workers custom domain hit the constraint that Cloudflare's free plan doesn't accept external subdomains as zones. The final solution was to place AWS CloudFront + WAF in front as a termination layer.
cloudflareworkerscloudfrontaws