Configuring a CloudFront distribution in front of API Gateway (Serverless Framework)

serverless.yml

resources:
  Resources:
    APIGatewayFront:
      Type: AWS::CloudFront::Distribution
      Properties:
        DistributionConfig:
          Enabled: true
          IPV6Enabled: true
          HttpVersion: http2
          Comment: CDN in front of API Gateway
          Origins:
          - Id: APIGWOrigin
            DomainName: ${ApiId}.execute-api.${aws:region}.amazonaws.com # TODO fix this to properly reference API ID of API Gateway in same service
            OriginPath: "/"
            CustomOriginConfig:
              HTTPSPort: 443
              OriginProtocolPolicy: https-only
          DefaultCacheBehavior:
            AllowedMethods: ["DELETE", "GET", "HEAD", "OPTIONS", "PATCH", "POST", "PUT"]
            CachedMethods: ["GET", "HEAD", "OPTIONS"]
            ForwardedValues:
              Headers:
              - Access-Control-Request-Headers
              - Access-Control-Request-Method
              - Origin
              - Authorization
              QueryString: true
            TargetOriginId: APIGWOrigin
            ViewerProtocolPolicy: https-only
            Compress: true
            DefaultTTL: 0