Examples of Envoy proxy on AWS Using Envoy proxy instead of CloudFront front-proxy-s3 Envoy proxy handles OIDC token front-proxy-jwt Authorization combining Envoy proxy and Open Policy Agent front-proxy-opa