Establishing HTTPS connection requires about 3½KB of bandwidth for the TLS handshake, but it does not explicitly say in documentation that CloudFront charges egress fees for that.
At this page it says:
When a viewer makes an HTTP request that is redirected to an HTTPS request, CloudFront charges for both requests. For the HTTP request, the charge is only for the request and for the headers that CloudFront returns to the viewer. For the HTTPS request, the charge is for the request, and for the headers and the object that are returned by your origin.
Does it mean that TLS handshake data is included in the price of HTTPS request or does Amazon charge extra egress fees for TLS handshake?