Web.config - IIS - AWS/EC2 REWRITE - Rewrite APEX, NON-WWW & NON-SSL - Catchall

web.config___.xml

<configuration>
    <system.webServer>
    ...
        <rewrite>
            <rules>
                <!-- To work, DNS subdomains must be wildcarded to this site. -->
                <!-- Also, this first rule must be listening for all incoming requests/"default web server". -->
                <!-- The first rule runs on anything that doesn't match "www.example.com". -->
                <rule name="Catchall redirect to www" stopProcessing="true">
                    <match url="(.*)" ignoreCase="true" />
                    <conditions logicalGrouping="MatchAny" trackAllCaptures="false">
                        <add input="{HTTP_HOST}" pattern="^www\.example\.com$" negate="true" />
                    </conditions>
                    <action type="Redirect" url="https://www.example.com/{R:0}" redirectType="Found" />
                </rule>
                <rule name="Redirect HTTP to HTTPS" stopProcessing="true">
                    <match url="(.*)" ignoreCase="true" />
                    <conditions logicalGrouping="MatchAny" trackAllCaptures="false">
                        <!-- Uncomment 2nd line for AWS EC2 SSL detection - uncomment 1st line for normal detection: -->
                        <!-- add input="{HTTPS}" ignoreCase="true" pattern="^OFF$" / -->
                        <add input="{HTTP_X_FORWARDED_PROTO}" pattern="https" negate="true" />
                    </conditions>
                    <action type="Redirect" url="https://www.example.com/{R:0}" redirectType="Permanent" />
                </rule>
            </rules>
        </rewrite>
    ...
    </system.webServer>
</configuration>