=== ORIGIN: AWS BACKEND ===

remote_addr (TCP peer): 64.252.77.69
X-Forwarded-For:        '216.73.217.62'
X-Amz-Cf-Id:            'a9_n06Vzgeekz4GDFBZArryk8F7isFyn4R4jmDzMfpq5PfNoV_j94w=='
Host:                   origin-aws.cf-saas.demotw.com
SNI:                    origin-aws.cf-saas.demotw.com
TLS:                    TLSv1.3 / TLS_AES_128_GCM_SHA256
Time:                   2026-08-14T02:20:32+00:00

This is Origin A (AWS). If you see X-Amz-Cf-Id, traffic arrived via CloudFront.
If XFF is populated, traffic arrived via a terminating edge (ALB or CloudFront).